run-llama / llama-agents / 42178203433
85%

DEFAULT BRANCH: main
Ran
Jobs 12
Files 235
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 85.177% (+0.004%) from 85.173%
42178203433

push

github

web-flow 
Update dependency gitpython to v3.2.1 [SECURITY] (#872)

> [!NOTE]
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[gitpython](https://redirect.github.com/gitpython-developers/GitPython)
([changelog](https://redirect.github.com/gitpython-developers/GitPython/blob/main/doc/source/changes.rst))
| `3.1.62` → `3.2.1` |
![age](https://developer.mend.io/api/mc/badges/age/pypi/gitpython/3.2.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/gitpython/3.1.62/3.2.1?slim=true)
|

---

### GitPython validates a submodule's ".git" path only after cloning
into it (RCE)
[CVE-2026-114145](https://nvd.nist.gov/vuln/detail/CVE-2026-114145) /
[GHSA-83vg-56qc-22m7](https://redirect.github.com/advisories/GHSA-83vg-56qc-22m7)

<details>
<summary>More information</summary>

#### Details
##### Summary

`create_submodule(name, path, url)` clones a submodule into the repo's
own `.git`
directory before it rejects the path. A `path` of ".git/hooks" is
accepted by the
pre-clone check, so the submodule is cloned straight into the live hooks
directory,
and a file named `post-checkout` in the submodule becomes an executable
`.git/hooks/post-checkout`. On 3.2.0+ the later index check does raise
`ValueError`,
but only after the clone already wrote to disk, and it does not remove
the planted
hook; on 3.1.x there is no such check and the call succeeds silently.
Either way the
hook runs on the next git operation (e.g. checkout), giving code
execution.

##### Details

The checkout path is validated too late, after the clone has already
mutated disk.
This breaks the "validate before mutation" invariant that commit
43a43cd8 ("Validate
submodule checkout and metadata paths before mutation") set out to
enforce.

Submodule.add() calls the permissive path c... (continued)

18963 of 22263 relevant lines covered (85.18%)

1.15 hits per line

Jobs
ID Job ID Ran Files Coverage
1 llama-agents-core - 42178203433.1 15
81.34
GitHub Action Run
2 llama-agents-appserver - 42178203433.2 17
81.96
GitHub Action Run
3 llamactl - 42178203433.3 48
79.79
GitHub Action Run
4 llama-index-workflows - 42178203433.4 53
94.18
GitHub Action Run
5 llama-agents-agentcore - 42178203433.5 5
70.22
GitHub Action Run
6 llama-agents-client - 42178203433.6 4
95.32
GitHub Action Run
7 llama-agents-dev - 42178203433.7 12
76.5
GitHub Action Run
8 llama-agents-server - 42178203433.8 31
86.15
GitHub Action Run
9 llama-index-utils-workflow - 42178203433.9 1
70.84
GitHub Action Run
10 llama-agents-dbos - 42178203433.10 11
75.72
GitHub Action Run
11 llama-agents-control-plane - 42178203433.11 31
74.61
GitHub Action Run
12 llama-agents-integration-tests - 42178203433.12 102
64.93
GitHub Action Run
Source Files on build 42178203433