elastic / cloudbeat / 25516916289
49%
main: 76%

LAST BUILD BRANCH: renovate/main-github.com-dlclark-regexp2-2.x
DEFAULT BRANCH: main
Ran
Jobs 1
Files 312
Run time 1min
Badge
Embed ▾
README BADGES
x

If you need to use a raster PNG badge, change the '.svg' to '.png' in the link

Markdown

Textile

RDoc

HTML

Rst
coverage: 49.315% (-0.01%) from 49.326%
25516916289

push

github

web-flow 
chore(deps): update module github.com/cyphar/filepath-securejoin to v0.6.1 (8.19) (#6019)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/cyphar/filepath-securejoin](https://redirect.github.com/cyphar/filepath-securejoin)
| indirect | patch | `v0.6.0` -> `v0.6.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>cyphar/filepath-securejoin
(github.com/cyphar/filepath-securejoin)</summary>

###
[`v0.6.1`](https://redirect.github.com/cyphar/filepath-securejoin/releases/tag/v0.6.1):
-- &quot;At last up jumped the cunning spider, and fiercely held her
fast.&quot;

[Compare
Source](https://redirect.github.com/cyphar/filepath-securejoin/compare/v0.6.0...v0.6.1)

This release includes a few more minor improvements to pathrs-lite,
mainly involving the fallback logic in tools which configure seccomp
profiles during execution (like runc) and to fix a file descriptor leak.

##### Fixed

- Our logic for deciding whether to use `openat2(2)` or fallback to an
`O_PATH`
    resolver would cache the result to avoid doing needless test runs of
`openat2(2)`. However, this causes issues when `pathrs-lite` is being
used by
a program that applies new seccomp-bpf filters onto itself -- if the
filter
denies `openat2(2)` then we would return that error rather than falling
back
to the `O_PATH` resolver. To resolve this issue, we no longer cache the
    result if `openat2(2)` was successful, only if there was an error.
- A file descriptor leak in our `openat2` wrapper (when doing the
necessary
    `dup` for `RESOLVE_IN_ROOT`) has been removed.

Thanks to the following contributors for making this release possible:

-   Aleksa Sarai <cyphar@cyphar.com>
-   Kir Kolyshkin <kolyshkin@gmail.com>
-   Li Fubang <lifubang@acmcoder.com>

Signed-off-by: Aleksa Sarai <cyphar@cyphar.com>

</details>

---

### Configura... (continued)

13748 of 27878 relevant lines covered (49.31%)

9.44 hits per line

Coverage Regressions

Lines Coverage ∆ File
3
83.61
 -0.98% internal/resources/providers/gcplib/inventory/provider.go
Jobs
ID Job ID Ran Files Coverage
1 25516916289.1 312
49.31
 GitHub Action Run
Source Files on build 25516916289