Merge pull request #105 from infosiftr/explicit-full-gitcommit

Enforce that `GitCommit` must be a *full* commit hash
docker-library · Aug 13, 2024 · 7afe152 · 7afe152
2 parents 63bf7cf + 5f27132
commit 7afe152
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/manifest/rfc2822.go b/manifest/rfc2822.go
@@ -16,7 +16,7 @@ import (
 )
 
 var (
-	GitCommitRegex = regexp.MustCompile(`^[0-9a-f]{1,64}$`)
+	GitCommitRegex = regexp.MustCompile(`^([0-9a-f]{40}|[0-9a-f]{64})$`)
 	GitFetchRegex  = regexp.MustCompile(`^refs/(heads|tags)/[^*?:]+$`)
 
 	// https://github.com/docker/distribution/blob/v2.7.1/reference/regexp.go#L37