Skip to content

fix(plugins): reject relative plugin dirs to prevent cwd fallback (CWE-426) - #3199

Open
divyansh42 wants to merge 3 commits into
tektoncd:mainfrom
divyansh42:fix/SRVKP-13570-plugin-untrusted-search-path
Open

fix(plugins): reject relative plugin dirs to prevent cwd fallback (CWE-426)#3199
divyansh42 wants to merge 3 commits into
tektoncd:mainfrom
divyansh42:fix/SRVKP-13570-plugin-untrusted-search-path

test(plugins): use TKN_PLUGINS_DIR=. to actually catch the cwd fallback

ddfe50e
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
Analyze (go)
succeeded Sep 2, 2026 in 4m 7s