The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
419 matches across 8 categories. Click a row to expand file-level details.
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .golangci.yml | 81 | # Check whether fmt.Errorf uses the %w verb for formatting errors. |
| LOW | .golangci.yml | 261 | first: false |
| LOW | cmd/docker-proxy/main_linux.go | 21 | parentPipeFd uintptr = 3 + iota |
| LOW | cmd/docker-proxy/udp_proxy_linux.go | 121 | again: |
| LOW | cmd/dockerd/winresources/event_messages.h | 1 | /* Do not edit this file manually. |
| LOW | cmd/dockerd/winresources/event_messages.h | 21 | // Sev - is the severity code |
| LOW | cmd/dockerd/winresources/winresources.go | 1 | // Package winresources is used to embed Windows resources into dockerd.exe. |
| LOW | integration/networking/port_mapping_linux_test.go | 1181 | // IP address 172.17.24.2, and its port 443 is exposed on the host, no remote |
| LOW | …n/network/bridge/iptablesdoc/iptablesdoc_linux_test.go | 1 | // Package iptablesdoc runs docker, creates networks, runs containers and |
| LOW | …n/network/bridge/nftablesdoc/nftablesdoc_linux_test.go | 1 | // Package nftablesdoc runs docker, creates networks, runs containers and |
| LOW | …n/network/bridge/nftablesdoc/nftablesdoc_linux_test.go | 401 | // elements = { "docker0" : jump filter-forward-in__docker0 } |
| LOW | integration/internal/termtest/stripansi.go | 1 | package termtest |
| LOW | integration/image/inspect_test.go | 81 | assert.Check(t, inspect.Descriptor.Digest.String() == inspect.ID) |
| LOW | integration/image/inspect_test.go | 101 | // # nginx |
| LOW | integration/container/copy_linux_test.go | 21 | // |
| LOW | integration/container/exec_test.go | 261 | // |
| LOW | integration/container/restart_test.go | 221 | } |
| LOW | integration/container/testdata/socketcall.c | 1 | #include <stdio.h> |
| LOW | integration/daemon/daemon_linux_test.go | 101 | "--fixed-cidr", "192.168.176.0/24", |
| LOW | integration/daemon/daemon_linux_test.go | 301 | // subnet - this is a configuration error, but has historically been |
| LOW | integration/service/create_test.go | 121 | // a few times, to give tasks time to be deallocated |
| LOW | integration/service/create_test.go | 321 | // inspect the container. If the output of the container inspect contains the |
| LOW | integration/service/create_test.go | 361 | // 1. Does the container, when inspected, have the sysctl option set? |
| LOW | integration/service/create_test.go | 421 | |
| LOW | integration/service/create_test.go | 601 | |
| LOW | integration/volume/mount_test.go | 241 | assert.Check(t, is.Equal(strings.TrimSpace(output.Stdout), tc.expected)) |
| LOW | integration-cli/docker_cli_cp_to_container_test.go | 81 | assert.NilError(c, fileContentEquals(c, cpPath(testVol, "dirX/file2-1"), "file2-1\n"), `The "dirX" directory should now |
| LOW | integration-cli/docker_cli_save_load_test.go | 241 | // present); |
| LOW | integration-cli/docker_cli_cp_from_container_test.go | 81 | // |
| LOW | internal/testutil/daemon/ops.go | 21 | } |
| LOW | internal/testutil/daemon/daemon.go | 241 | |
| LOW | internal/testutil/environment/environment.go | 101 | // Make sure in context of daemon, not the local platform. Note we can't |
| LOW | internal/testutil/netnsutils/context_unix.go | 161 | // or [golang.org/x/sync/errgroup.Group]. |
| LOW | internal/namesgenerator/names-generator.go | 1 | // Package namesgenerator generates random names. |
| LOW | errdefs/doc.go | 1 | // Package errdefs defines a set of error interfaces that packages should use for communicating classes of errors. |
| LOW | hack/make.sh | 1 | #!/usr/bin/env bash |
| LOW | contrib/dockerd-rootless.sh | 1 | #!/bin/sh |
| LOW | contrib/dockerd-rootless.sh | 21 | # * DOCKERD_ROOTLESS_ROOTLESSKIT_SLIRP4NETNS_SECCOMP=(auto|true|false): whether to protect slirp4netns with seccomp. |
| LOW | contrib/dockerd-rootless.sh | 41 | # gvisor-tap-vsock | builtin | Slow | Fast ✅ | ✅ (*) | ✅ | Default when slirp4netns is |
| LOW | contrib/download-frozen-image-v2.sh | 1 | #!/usr/bin/env bash |
| LOW | contrib/syscall-test/userns.c | 1 | #define _GNU_SOURCE |
| LOW | contrib/syscall-test/ns.c | 1 | #define _GNU_SOURCE |
| LOW | daemon/reload.go | 61 | // Any errors returned by the functions are collated into a |
| LOW | daemon/list.go | 581 | // updates the ref to the actual ID when it doesn't. |
| LOW | daemon/list.go | 601 | // b0318bca5aef 3fbc63216742 "sh" 3 years ago Exited (0) 3 years ago ecstatic_beaver |
| LOW | daemon/exec_linux_test.go | 41 | appArmorProfile: "my-custom-profile", |
| LOW | daemon/delete.go | 101 | } |
| LOW | daemon/archive_tarcopyoptions_unix.go | 41 | // - username:groupname - valid username; valid groupname from /etc/passwd, /etc/group |
| LOW | daemon/archive_tarcopyoptions_unix.go | 101 | // Match behavior of "docker run": when using a UID for the |
| LOW | daemon/archive_windows.go | 201 | if !stat.IsDir() { |
| LOW | daemon/container_operations.go | 781 | if nwName == network.DefaultNetwork { |
| LOW | daemon/container_operations.go | 961 | // not an "invalid parameter" because getNetworkedContainer is called |
| LOW | daemon/exec.go | 101 | if user := options.User; user != "" { |
| LOW | daemon/container_operations_unix.go | 541 | case ctr.HostConfig.NetworkMode.IsUserDefined(): |
| LOW | daemon/runtime_unix.go | 241 | // the path to a runtime binary. If we allowed this, anyone with Engine API |
| LOW | daemon/network.go | 361 | |
| LOW | daemon/containerfs_linux.go | 21 | ) |
| LOW | daemon/daemon_unix.go | 281 | } |
| LOW | daemon/daemon_unix.go | 1021 | |
| LOW | daemon/daemon_unix.go | 1041 | // options, it's used as the gateway address and - because it's always |
| 317 more matches not shown… | |||
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | integration-cli/docker_cli_pull_test.go | 72 | // more robust against these network glitches, allow a |
| LOW | hack/generate-test-rogue-certs.sh | 24 | # to connect or just use '*' for a certificate valid for any hostname: |
| LOW | hack/generate-test-certs.sh | 25 | # to connect or just use '*' for a certificate valid for any hostname: |
| MEDIUM | hack/test/e2e-run.sh | 46 | # - https://github.com/go-delve/delve/blob/v1.24.1/CHANGELOG.md#1231-2024-09-23 |
| MEDIUM | hack/test/e2e-run.sh | 46 | # - https://github.com/go-delve/delve/blob/v1.24.1/CHANGELOG.md#1231-2024-09-23 |
| MEDIUM | daemon/libnetwork/networkdb/networkdb.go | 293 | // The garbage collection logic for entries leverage the presence of the network. |
| MEDIUM | daemon/libnetwork/networkdb/cluster.go | 365 | // The reapTableEntries leverage the presence of the network so garbage collect entries first |
| MEDIUM | daemon/logger/loggerutils/sharedtemp.go | 21 | // robust to file renames. Input files are assumed to be immutable; no attempt |
| MEDIUM | daemon/volume/mounts/windows_parser.go | 58 | // - Essentially using the folder solution from |
| MEDIUM | daemon/volume/local/local.go | 365 | // Essentially docker doesn't care if this fails, it will send an error, but |
| LOW | api/docs/v1.35.yaml | 80 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.38.yaml | 80 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.34.yaml | 71 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.29.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.33.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.25.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.32.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.28.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.27.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.31.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.30.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.26.yaml | 69 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.37.yaml | 80 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| LOW | api/docs/v1.36.yaml | 80 | If you have already got an identity token from the [`/auth` endpoint](#operation/SystemAuth), you can just pass this |
| MEDIUM | client/image_import_opts.go | 11 | Source io.Reader // Source is the data to send to the server to create this image from. You must set SourceName to |
| MEDIUM | client/image_import_opts.go | 12 | SourceName string // SourceName is the name of the image to pull. Set to "-" to leverage the Source attribute. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | .github/workflows/codeql.yml | 23 | # ┌───────────── minute (0 - 59) |
| MEDIUM | .github/workflows/codeql.yml | 24 | # │ ┌───────────── hour (0 - 23) |
| MEDIUM | .github/workflows/codeql.yml | 25 | # │ │ ┌───────────── day of the month (1 - 31) |
| MEDIUM | .github/workflows/codeql.yml | 26 | # │ │ │ ┌───────────── month (1 - 12) |
| MEDIUM | .github/workflows/codeql.yml | 27 | # │ │ │ │ ┌───────────── day of the week (0 - 6) (Sunday to Saturday) |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/workflows/.windows.yml | 341 | # If you update the collector here, don't forget to update the version |
| LOW | .github/workflows/.windows.yml | 341 | # If you update the collector here, don't forget to update the version |
| LOW | .github/actions/setup-tracing/action.yml | 23 | # you update the collector here, don't forget to update the version set |
| LOW | .github/actions/setup-tracing/action.yml | 23 | # you update the collector here, don't forget to update the version set |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | internal/testutil/netnsutils/context_unix.go | 49 | // Example usage: |
| LOW | internal/testutil/netnsutils/context_unix.go | 63 | // Example usage: |
| LOW | internal/testutil/netnsutils/context_unix.go | 163 | // Example usage: |
| Severity | File | Line | Snippet |
|---|---|---|---|
| MEDIUM | hack/vendor.sh | 3 | # This file is just a wrapper around the 'go mod vendor' tool. |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | .github/workflows/.windows.yml | 83 | # Check if Docker service exists and try to start it if stopped |
| LOW | .github/workflows/.windows.yml | 174 | # Check if Docker service exists and try to start it if stopped |
| Severity | File | Line | Snippet |
|---|---|---|---|
| LOW | daemon/internal/distribution/manifest.go | 113 | // We know we have the content locally, we need to check if we've seen this content at the specified repository before |