elastic / cloudbeat / 24806765903
76%
main: 76%

LAST BUILD BRANCH: renovate/8.19-github.com-mikefarah-yq-v4-4.x
DEFAULT BRANCH: main
Ran
Jobs 1
Files 230
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 76.228% (-0.008%) from 76.236%
24806765903

push

github

web-flow 
chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.1 (9.3) (#4855)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/cyphar/filepath-securejoin](https://redirect.github.com/cyphar/filepath-securejoin)
| indirect | patch | `v0.6.0` -> `v0.6.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cyphar/filepath-securejoin
(github.com/cyphar/filepath-securejoin)</summary>

###
[`v0.6.1`](https://redirect.github.com/cyphar/filepath-securejoin/releases/tag/v0.6.1):
-- &quot;At last up jumped the cunning spider, and fiercely held her
fast.&quot;

[Compare
Source](https://redirect.github.com/cyphar/filepath-securejoin/compare/v0.6.0...v0.6.1)

This release includes a few more minor improvements to pathrs-lite,
mainly involving the fallback logic in tools which configure seccomp
profiles during execution (like runc) and to fix a file descriptor leak.

##### Fixed

- Our logic for deciding whether to use `openat2(2)` or fallback to an
`O_PATH`
    resolver would cache the result to avoid doing needless test runs of
`openat2(2)`. However, this causes issues when `pathrs-lite` is being
used by
a program that applies new seccomp-bpf filters onto itself -- if the
filter
denies `openat2(2)` then we would return that error rather than falling
back
to the `O_PATH` resolver. To resolve this issue, we no longer cache the
    result if `openat2(2)` was successful, only if there was an error.
- A file descriptor leak in our `openat2` wrapper (when doing the
necessary
    `dup` for `RESOLVE_IN_ROOT`) has been removed.

Thanks to the following contributors for making this release possible:

-   Aleksa Sarai <cyphar@cyphar.com>
-   Kir Kolyshkin <kolyshkin@gmail.com>
-   Li Fubang <lifubang@acmcoder.com>

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

</details>

---

### Configurat... (continued)

9649 of 12658 relevant lines covered (76.23%)

16.56 hits per line

Coverage Regressions

Lines Coverage ∆ File
3
82.74
 -0.33% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 24806765903.1 230
76.23
 GitHub Action Run
Source Files on build 24806765903