gitlab: 13.0.4 -> 13.0.6
CI Token Access Control An authorization issue discovered in the mirroring logic allowed read access to private repositories. This issue is now mitigated in the latest release and is waiting for a CVE ID to be assigned. https://about.gitlab.com/releases/2020/06/10/critical-security-release-13-0-6-released/
This commit is contained in:
@@ -3,13 +3,13 @@
|
||||
buildGoPackage rec {
|
||||
pname = "gitlab-workhorse";
|
||||
|
||||
version = "8.31.1";
|
||||
version = "8.31.2";
|
||||
|
||||
src = fetchFromGitLab {
|
||||
owner = "gitlab-org";
|
||||
repo = "gitlab-workhorse";
|
||||
rev = "v${version}";
|
||||
sha256 = "1c2y1icil98qay9d95q1rlpi0ffhll990grkkib9srsn55b2i86v";
|
||||
sha256 = "0wvhhjfb490mjdrmc9xwr3qfh3941xn3b02c757ghrvzwv329wvg";
|
||||
};
|
||||
|
||||
goPackagePath = "gitlab.com/gitlab-org/gitlab-workhorse";
|
||||
|
||||
Reference in New Issue
Block a user