Ayush Kumar a10dba6d37 Fix: resolve gosec G304 lint failure in Terraform module cache check (#7190) ...

Wrap the cache remote marker read in filepath.Clean, the same pattern
other os.ReadFile call sites in this repo use to satisfy gosec. The
path is built from filepath.Join and a constant suffix, with the module
name validated beforehand, so behavior is unchanged.

The finding surfaced on master after the GHSA-fmgp-q6jx-gg3x merge
because the advisory workflow did not run the full lint job.

Signed-off-by: Ayush Kumar <ayushshyamkumar888@gmail.com>

2026-06-10 11:24:14 -07:00

..

addon

Feat: add ClosedUnion and ClosedStruct support in defkit (#7069)

2026-03-17 09:20:48 -07:00

appfile

Feat: native helm component and provider (#7080)

2026-04-15 11:06:33 +01:00

auth

Feat(tests): Add unit test coverage for core packages (#6880)

2025-09-03 05:58:58 +08:00

builtin

Chore: imports workflow crd from pkg repo (#6954)

2025-11-06 18:56:04 -08:00

cache

Chore: (deps): Update k8s to 1.29 (#6654)

2025-01-03 07:54:42 +08:00

cmd

Fix: vela up command to behave similarly with kubectl (#6809)

2025-06-23 21:25:45 -07:00

component

Feat(appfile): Add comprehensive unit tests for appfile and component package (#6908)

2025-10-17 10:45:45 +01:00

config

fix: update YAML import path to use go.yaml.in/yaml/v3 and adjust dependencies in go.mod and go.sum (#6944)

2025-11-06 10:37:19 +00:00

controller

Fix: resolve gosec G304 lint failure in Terraform module cache check (#7190)

2026-06-10 11:24:14 -07:00

cue

Fix(helmchart): wire options correctly (#7151) and decompose provider (#7154)

2026-05-24 05:57:05 -07:00

definition

Fix: defkit changes for resource builder docs (#7136)

2026-05-24 14:09:11 -07:00

features

Feat: Validate undeclared parameters in application definitions (#7075)

2026-03-22 12:45:02 -07:00

logging

Refactor: Pre-Validation Hooks to be More Extensible and Testable (#6978)

2025-11-17 18:14:40 -08:00

monitor

Feat(test): Enhance unit test coverage for webhook, workflow, VELAQL, and monitor packages (#6895)

2025-10-31 13:49:15 +00:00

multicluster

Feat(multicluster): Enhance Unit Test Coverage for Multicluster Packages (#6892)

2025-09-15 08:37:55 -07:00

oam

Feat: support per-application reconciliation interval override via annotation (#7089)

2026-05-05 14:24:33 -07:00

policy

Feat(tests): Add unit test coverage for core packages (#6889)

2025-09-11 07:29:07 +08:00

registry

Add a minimal, interface based provider registry to break complex import cycle (#7021)

2026-01-19 11:22:28 +00:00

resourcekeeper

Fix: rebuild appliedResources from ResourceTracker instead of filtering by name (#7083)

2026-03-28 21:37:45 -07:00

resourcetracker

Feat(tests): Add unit test coverage for core packages (#6889)

2025-09-11 07:29:07 +08:00

rollout

Chore: (deps): Update k8s to 1.29 (#6654)

2025-01-03 07:54:42 +08:00

schema

Feat: Immutable Parameters (#7059)

2026-03-18 21:11:22 -07:00

utils

feat(helm): set User-Agent when downloading Helm repo index.yaml (#7162)

2026-06-03 07:37:52 -07:00

velaql

Chore: bumps up pkg and workflow dependency versions (#7026)

2026-01-20 15:32:03 +00:00

webhook

Feat: helm chart auth (#7148)

2026-05-22 09:09:55 -07:00

workflow

Fix(helmchart): wire options correctly (#7151) and decompose provider (#7154)

2026-05-24 05:57:05 -07:00