google-guest-agent: upgrade golang.org/x/crypto to v0.52.0 to fix CVE-2026-46595 Upgrade golang.org/x/crypto dependency to v0.52.0 and re-vendor Go dependencies via `go mod vendor` to resolve CVE-2026-46595 in app-admin/google-guest-agent. Provenance: - CVE-2026-46595: Go module golang.org/x/crypto fixed in v0.52.0, fix commit go.dev/cl/781642 (https://github.com/advisories/GHSA-x527-x647-q7gg) Build adjustments: - go get golang.org/x/crypto@v0.52.0 - go mod tidy && go mod vendor && go mod verify BUG=b/575808825 TEST=go mod verify; CGO_ENABLED=0 go build -mod=vendor ./... RELEASE_NOTE=Fixed CVE-2026-46595 in google-guest-agent. cos-patch: security-high Change-Id: I6bbbbaffc596d708bc3daf59a0788a7b67b9596d Reviewed-on: https://cos-review.googlesource.com/c/third_party/google-guest-agent/+/228108 Reviewed-by: Chenglong Tang <chenglongtang@google.com> SLSA-Policy-Verified: SLSA Policy Verification Service <devtools-gerritcodereview-exitgate@google.com> Tested-by: Cusky Presubmit Bot <presubmit@cos-infra-prod.iam.gserviceaccount.com>
TODO: Add link to external documentation whenever it is ready.
This repository contains the source code and packaging artifacts for the Google guest agent. These components are installed on Windows and Linux GCE VMs in order to enable GCE platform features.
In the codebase there's a GNU Make based build system with targets to build and test the guest agent.
In order to build both the guest-agent and core_plugins, run
make
To build only one or the other, run the respective make target:
make build cmd/google_guest_agent/google_guest_agent
make build cmd/core_plugin/core_plugin
To run all the go tests, run:
make test
For more targets and info about the build system run:
make help