Peter Steinberger
|
524185a68e
|
fix(exec): bind approval trust to realpaths (#82825)
|
2026-05-17 03:41:50 +01:00 |
|
Shakker
|
c3de52ab60
|
test: tighten exec safe bin warning assertion
|
2026-05-11 02:38:39 +01:00 |
|
Pavan Kumar Gondhi
|
666f48d9b8
|
fix(security): remove busybox/toybox from interpreter-like safe bins [AI-assisted] (#65713)
* fix: address issue
* fix: address review feedback
* fix: address PR review feedback
* fix: address review-pr skill feedback
* fix: address PR review feedback
* docs: add changelog entry for PR merge
|
2026-04-13 12:03:15 +05:30 |
|
Vincent Koc
|
2e497291e4
|
test(infra): reuse temp dir helper in fs safety tests
|
2026-04-06 06:10:02 +01:00 |
|
Vincent Koc
|
57fccca2dc
|
fix(exec): keep awk and sed out of safeBins fast path (#58175)
* wip(exec): preserve safe-bin semantics progress
* test(exec): cover safe-bin semantic variants
* fix(exec): address safe-bin review follow-up
|
2026-03-31 19:29:53 +09:00 |
|
Peter Steinberger
|
71a3dd80e7
|
fix: tighten safe bin runtime policy coverage
|
2026-03-13 23:55:07 +00:00 |
|
Peter Steinberger
|
4355e08262
|
refactor: harden safe-bin trusted dir diagnostics
|
2026-02-24 23:29:44 +00:00 |
|
Peter Steinberger
|
b67e600bff
|
fix(security): restrict default safe-bin trusted dirs
|
2026-02-24 23:13:37 +00:00 |
|
Peter Steinberger
|
a67689a7e3
|
fix: harden allow-always shell multiplexer wrapper handling
|
2026-02-24 03:06:51 +00:00 |
|
Peter Steinberger
|
84e5ab598a
|
fix: make windows CI path handling deterministic
|
2026-02-22 22:34:49 +00:00 |
|
Peter Steinberger
|
64b273a71c
|
fix(exec): harden safe-bin trust and add explicit trusted dirs
|
2026-02-22 22:43:18 +01:00 |
|
Peter Steinberger
|
0d0f4c6992
|
refactor(exec): centralize safe-bin policy checks
|
2026-02-22 13:18:25 +01:00 |
|