stacklok / minder / 9882296173

53%

Build Type

push

github

Committed by web-flow

Commit Message

Artifact tag matcher: Curb complexity when parsing regexps from user input (#3836)

* Mitigate ReDos in artifact tag matcher

This commit adds a limit to the lengrh of regular expressions we take
from user input to set a length limit and curve the complexity Minder
handles when compiling them.

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

* Add test for artifact.BuildFilter

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

---------

Signed-off-by: Adolfo García Veytia (Puerco) <puerco@stacklok.com>

Run Details

3 of 3 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

11659 of 21962 relevant lines covered (53.09%)

48.2 hits per line