`github.com/moby/buildkit`

Ecosystem:
go

Package URL:
pkg:golang/github.com/moby/buildkit

Total PRs:
608 Dependabot PRs

Latest PR:
16 days ago

Unique Repositories:
137 repositories

Unique Repos (30 days):
3 repositories

Security Advisories

BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts

GHSA-m3r6-h7wv-7xxv CVE-2024-23651 HIGH published over 2 years ago • updated 3 days ago

### Impact Two malicious build steps running in parallel sharing the same cache mounts with subpaths could cause a race condition that can lead to ...

View all 7 advisories

Recent PRs

RSS Feed

build(deps): bump the go_modules group across 1 directory with 8 updates

leandro4979-hub/tailscale #34

0.20.2 → 0.28.1 Minor PR

Closed 16 days ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1

CodeLinaro-mirror/yocto-mirrors_github_docker_compose #14

0.31.0 → 0.31.1 Patch PR

Closed 29 days ago 1 comment

deps(deps): bump github.com/moby/buildkit from 0.30.0 to 0.31.1

jimschubert/docked #34

0.30.0 → 0.31.1 Minor PR

Open about 1 month ago 2 comments

Bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the all-dependencies group across 1 directory

istio/istio #60700

0.31.0 → 0.31.1 Patch PR

Open about 1 month ago 1 comment

chore(deps): bump github.com/moby/buildkit from 0.31.0 to 0.31.1 in the moby group

sylabs/singularity #4204

0.31.0 → 0.31.1 Patch PR

Closed about 1 month ago 1 comment

chore(deps): bump github.com/moby/buildkit from 0.29.0 to 0.31.0

stacklok/frizbee #433

0.29.0 → 0.31.0 Minor PR

Closed about 1 month ago 1 comment

chore(deps): bump the go_modules group across 5 directories with 28 updates

GlacierEQ/sourcegraph-public-snapshot #38

0.12.5 → 0.28.1 Minor PR

Open 2 months ago 4 comments

build(deps): bump the go_modules group across 1 directory with 5 updates

eminwux/kukeon #659

0.25.2 → 0.28.1 Minor PR

Closed 2 months ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0

RemakingEden/dagger #668

0.10.3 → 0.30.0 Minor PR

Closed 2 months ago 4 comments

build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.30.0

doytsujin/act #318

0.10.3 → 0.30.0 Minor PR

Open 2 months ago 1 comment

deps(deps): bump github.com/moby/buildkit from 0.29.0 to 0.30.0 in the docker group across 1 directory

rhajizada/cradle #19

0.29.0 → 0.30.0 Minor PR

Open 2 months ago 1 comment

chore(deps): bump the go-minor-patch group across 1 directory with 6 updates

schmitthub/clawker #288

0.29.0 → 0.30.0 Minor PR

Open 2 months ago 1 comment

Bump the all-dependencies group across 1 directory with 4 updates

istio/istio #60244

0.29.0 → 0.30.0 Minor PR

Open 3 months ago 2 comments

Bump the go_modules group across 1 directory with 7 updates

GlacierEQ/cog #28

0.22.0 → 0.28.1 Minor PR

Open 3 months ago 2 comments

Bump the all-dependencies group across 1 directory with 32 updates

istio/istio #60215

0.23.2 → 0.30.0 Minor PR

Open 3 months ago 1 comment

Bump the all-dependencies group across 1 directory with 3 updates

istio/istio #60134

0.28.0 → 0.29.0 Minor PR

Open 3 months ago 5 comments

chore(deps): bump the go_modules group across 5 directories with 30 updates

GlacierEQ/sourcegraph-public-snapshot #28

0.12.5 → 0.28.1 Minor PR

Open 3 months ago 3 comments

Bump the go_modules group across 1 directory with 8 updates

GoogleCloudPlatform/osconfig #963

0.23.2 → 0.28.1 Minor PR

Open 3 months ago 3 comments

build(deps): Bump github.com/moby/buildkit from 0.25.2 to 0.28.1 in /test/integration

eagle19900203-boop/flagd #3

0.25.2 → 0.28.1 Minor PR

Closed 3 months ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1

LetheanNetwork/osv-scanner #2

0.23.2 → 0.28.1 Minor PR

Closed 3 months ago 2 comments

chore(deps): bump the go_modules group across 5 directories with 29 updates

GlacierEQ/sourcegraph-public-snapshot #22

0.12.5 → 0.28.1 Minor PR

Open 3 months ago 3 comments

chore(deps): bump the go_modules group across 5 directories with 28 updates

GlacierEQ/sourcegraph-public-snapshot #20

0.12.5 → 0.28.1 Minor PR

Closed 4 months ago 3 comments

chore: bump the golang group across 1 directory with 28 updates

darwinz/skaffold #52

0.28.1 → 0.29.0 Minor PR

Closed 4 months ago 1 comment

Bump the all-dependencies group across 1 directory with 23 updates

istio/istio #59841

0.28.0 → 0.29.0 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the minor group across 1 directory with 6 updates

containifyci/engine-ci #426

0.28.1 → 0.29.0 Minor PR

Open 4 months ago 3 comments

Bump the all-dependencies group across 1 directory with 24 updates

istio/istio #59823

0.28.0 → 0.29.0 Minor PR

Closed 4 months ago 2 comments

chore(deps): bump the go_modules group across 5 directories with 28 updates

AKJUS/sourcegraph-public-snapshot #19

0.12.5 → 0.28.1 Minor PR

Open 4 months ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 in the go_modules group across 1 directory

google/osv-scanner #2705

0.23.2 → 0.28.1 Minor PR

Open 4 months ago 2 comments

chore: bump the go_modules group across 5 directories with 6 updates

Activ8-AI/skaffold #24

0.21.1 → 0.28.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump the minor group across 1 directory with 4 updates

containifyci/engine-ci #421

0.28.1 → 0.29.0 Minor PR

Open 4 months ago 3 comments

chore: Bump github.com/moby/buildkit from 0.27.1 to 0.28.1 in /backend

OrcaCD/orca-cd #52

0.27.1 → 0.28.1 Minor PR

Open 4 months ago 2 comments

build(deps): bump github.com/moby/buildkit from 0.23.2 to 0.28.1 in /eve-tools/bpftrace-compiler

lf-edge/eve #5743

0.23.2 → 0.28.1 Minor PR

Open 4 months ago 1 comment

Bump the all-dependencies group across 1 directory with 18 updates

istio/istio #59732

0.28.0 → 0.29.0 Minor PR

Open 4 months ago 3 comments

chore: bump the go_modules group across 5 directories with 6 updates

Activ8-AI/skaffold #23

0.21.1 → 0.28.1 Minor PR

Closed 4 months ago 1 comment

chore(deps): bump github.com/moby/buildkit from 0.13.0-beta3 to 0.29.0 in /internal/mage

dolanor/dagger #1253

0.13.0-beta3 → 0.29.0 Minor PR

Open 4 months ago 4 comments

Bump the all-dependencies group across 1 directory with 7 updates

istio/istio #59694

0.28.0 → 0.29.0 Minor PR

Closed 4 months ago 3 comments

chore(deps): bump github.com/moby/buildkit from 0.13.0-beta3 to 0.29.0 in /internal/mage

slumbering/dagger #1267

0.13.0-beta3 → 0.29.0 Minor PR

Open 4 months ago 2 comments

chore(deps): bump github.com/moby/buildkit from 0.28.1 to 0.29.0

scaleway/scaleway-cli #5441

0.28.1 → 0.29.0 Minor PR

Open 4 months ago 1 comment

Bump github.com/moby/buildkit from 0.25.1 to 0.28.1

greboid/adze #5

0.25.1 → 0.28.1 Minor PR

Closed 4 months ago 3 comments

chore: bump the go_modules group across 5 directories with 5 updates

Activ8-AI/skaffold #22

0.21.1 → 0.28.1 Minor PR

Closed 4 months ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.12.5 to 0.28.1

konflux-ci/e2e-tests #1825

0.12.5 → 0.28.1 Minor PR

Open 4 months ago 3 comments

Bump the go_modules group across 2 directories with 2 updates

YoutacRandS-VA/gitpod #28

0.12.5 → 0.28.1 Minor PR

Closed 4 months ago 1 comment

build(deps): bump github.com/moby/buildkit from 0.10.3 to 0.28.1

doytsujin/act #316

0.10.3 → 0.28.1 Minor PR

Open 4 months ago 1 comment

chore(deps): bump the engine group across 1 directory with 75 updates

aluzzardi/dagger #736

0.15.1-0.20240723181353-ffadc9ff1531 → 0.29.0-rc1 Minor PR

Closed 4 months ago 2 comments

chore(deps): bump github.com/moby/buildkit from 0.23.1 to 0.28.1 in the go_modules group across 1 directory

joseguzman1337/trivy #950

0.23.1 → 0.28.1 Minor PR

Open 4 months ago 1 comment

:seedling: Bump github.com/moby/buildkit from 0.26.3 to 0.28.1

ossf/scorecard #4983

0.26.3 → 0.28.1 Minor PR

Open 4 months ago 2 comments

Bump github.com/moby/buildkit from 0.28.0 to 0.28.1

istio/istio #59629

0.28.0 → 0.28.1 Patch PR

Open 4 months ago 3 comments

chore(deps): bump github.com/moby/buildkit from 0.27.1 to 0.28.1

Ericsson/trivy #252

0.27.1 → 0.28.1 Minor PR

Closed 4 months ago 2 comments

build(deps): bump github.com/moby/buildkit from 0.24.0 to 0.28.1 in /tools/get-deps

rene/eve #228

0.24.0 → 0.28.1 Minor PR

Open 4 months ago 1 comment

Bump github.com/moby/buildkit from 0.25.1 to 0.28.1

tyhal/crie #987

0.25.1 → 0.28.1 Minor PR

Open 4 months ago 1 comment

Package Details

Name:	`github.com/moby/buildkit`
Ecosystem:	go
PURL Type:	golang
Package URL:	`pkg:golang/github.com/moby/buildkit`
JSON API:	View JSON

Security Advisories

7

Active advisories

CRITICAL 2

HIGH 3

MODERATE 2

View All golang Advisories

Package Information

Description:

Repository:	https://github.com/moby/buildkit
Homepage:	https://github.com/moby/buildkit
Latest Release:	`v0.22.0` about 1 year ago
Dependent Repos:	1,163
Dependent Packages:	896
Ranking:	Top 0.2282% by dependent repos Top 0.1434% by dependent pkgs

PR Status

Open 265 (43.6%)

Merged 58 (9.5%)

Closed 226 (37.2%)

PR Types

Minor 485 (79.8%)

Patch 61 (10.0%)

github.com/moby/buildkit

Security Advisories

BuildKit vulnerable to possible race condition with accessing subpaths from cache mounts

BuildKit vulnerable to possible host system access from mount stub cleaner

Buildkit's interactive containers API does not validate entitlements check

Buildkit credentials inlined to Git URLs could end up in provenance attestation

BuildKit Git URL subdir component can cause access to restricted files

Recent PRs

Package Details

Security Advisories

7

Package Information

PR Status

PR Types

`github.com/moby/buildkit`