New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Backport PR #2792 to release/v1.7 for Happy New Year 2025 #2794

Merged

vankichi merged 1 commit into release/v1.7 from backport/release/v1.7/happy-new-year-2025

Jan 23, 2025

Merged

Backport PR #2792 to release/v1.7 for Happy New Year 2025 #2794

:tada: Happy New Year 2025 (#2792)

GitHub Advanced Security / CodeQL completed Jan 7, 2025 in 2s

Error when processing the SARIF file

New alerts in code changed by this pull request

Security Alerts:

1 high

Alerts not introduced by this pull request might have been detected because the code changes were too large.

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 245 in pkg/agent/sidecar/service/restorer/restorer.go

Code scanning / CodeQL

Arbitrary file access during archive extraction ("Zip Slip") High

Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.
Unsanitized archive entry, which may contain '..', is used in a

file system operation

.