zalando-incubator / kube-ingress-aws-controller / 21943088608
72%

DEFAULT BRANCH: master
Ran
Jobs 1
Files 27
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 71.597%. Remained the same
21943088608

push

github

web-flow 
build(deps): bump github.com/zalando/skipper from 0.22.115 to 0.24.0 (#773)

Bumps [github.com/zalando/skipper](https://github.com/zalando/skipper)
from 0.22.115 to 0.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/zalando/skipper/releases">github.com/zalando/skipper's
releases</a>.</em></p>
<blockquote>
<h2>v0.24.0</h2>
<h3>Changes</h3>
<p>security: disable kubernetes external name by default, fixes
CVE-2026-24470</p>
<p>ref: <a
href="https://github.com/zalando/skipper/security/advisories/GHSA-mxxc-p822-2hx9">https://github.com/zalando/skipper/security/advisories/GHSA-mxxc-p822-2hx9</a></p>
<p>This release breaks end-users and library-users that depend on
Kubernetes
Ingress referencing a Kubernetes service type ExternalName.</p>
<p>If you are end-user and depend on the former behavior, you can pass
<code>-enable-kubernetes-external-names</code> to your deployment.
If you are library-user and depend on the former behavior, you can pass
the following option to restore behavior:</p>
<pre lang="go"><code>skipper.Run(skipper.Options{
    EnableExternalNames: true,
})
</code></pre>
<p>Thanks <a
href="https://github.com/b0b0haha">https://github.com/b0b0haha</a> and
<a href="https://github.com/moyushui">https://github.com/moyushui</a>
and <a
href="https://github.com/j311yl0v3u">https://github.com/j311yl0v3u</a>
providing us a detailed report how to exploit this vulnerability that is
available by default in skipper versions &lt;v0.24</p>
<h3>Multiarch Docker image</h3>
<p>Multiarch Docker image is available in GitHub's docker registry:</p>
<pre><code>docker run -it ghcr.io/zalando/skipper:v0.24.0 skipper --help
</code></pre>
<h3>Docker image</h3>
<p>Docker image is available in Zalando's Open Source registry:</p>
<pre><code>docker run -it
registry.opensource.zalan.do/teapot/skipper:v0.24.0 skipper --help
</code></pre>
<h2>v0.23.1</h2>
<h3>Changes</h3>
<p>build(deps): bump oss-fuzz-base/base-builder-go from
<cod... (continued)

2856 of 3989 relevant lines covered (71.6%)

11.0 hits per line

Jobs
ID Job ID Ran Files Coverage
1 21943088608.1 27
71.6
 GitHub Action Run
Source Files on build 21943088608