Function TestWriteComposeFileWithExtendsPathTraversal

pkg/remote/oci_test.go:120–139

(t *testing.T)

}

func TestWriteComposeFileWithExtendsPathTraversal(t *testing.T) {
	tmpDir := t.TempDir()

	// Create a layer with com.docker.compose.extends=true and a path traversal attempt
	layer := spec.Descriptor{
		MediaType: "application/vnd.docker.compose.file.v1+yaml",
		Digest:    "sha256:test123",
		Size:      100,
		Annotations: map[string]string{
			"com.docker.compose.extends": "true",
			"com.docker.compose.file":    "../other",
		},
	}

	content := []byte("services:\n  test:\n    image: nginx\n")

	// writeComposeFile should return an error due to path traversal
	err := writeComposeFile(layer, 0, tmpDir, content)
	assert.Error(t, err, "invalid OCI artifact")
}