Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

disable jib gradle in skaffold init by default #3906

Conversation

balopat
Copy link
Contributor

@balopat balopat commented Apr 2, 2020

For security reasons (gradle executes arbitrary things in the exec section) this PR disables jib gradle analysis by default in skaffold init. If callers want to still execute gradle analysis on trusted projects, they have to pass in both --XXenableJibInit and --XXenableJibGradleInit.

@codecov
Copy link

codecov bot commented Apr 2, 2020

Codecov Report

Merging #3906 into master will increase coverage by <.01%.
The diff coverage is 100%.

Impacted Files Coverage Δ
pkg/skaffold/initializer/analyze/analyze.go 89.28% <100%> (+0.19%) ⬆️
pkg/skaffold/build/jib/init.go 88.52% <100%> (ø) ⬆️
cmd/skaffold/app/cmd/init.go 100% <100%> (ø) ⬆️
pkg/skaffold/initializer/analyze/builder.go 100% <100%> (ø) ⬆️

@balopat balopat merged commit 3ac3212 into GoogleContainerTools:master Apr 2, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants