feat: Simple volume mount validation for Linux#115

Merged

williajm merged 25 commits into

mainfrom

fix/simple-volume-validation

Nov 15, 2025

Commits on Nov 15, 2025

feat: Add simple volume mount validation for Linux

williajm
and
claude
committed
feat: Add simple volume mount validation for Linux

williajm
and
claude
committed
chore: Remove accidental Gemini workflows

williajm
and
claude
committed
chore: Remove security review files from git, keep locally

williajm
and
claude
committed
chore: Remove validation proposal from git, keep locally

williajm
and
claude
committed
test: Add comprehensive unit tests for volume mount validation

williajm
and
claude
committed
feat: Enhance credential directory protection with substring matching

williajm
and
claude
committed
docs: Fix misleading claims about OAuth in startup scripts

williajm
and
claude
committed
security: Fix command injection via environment variables (H1)

williajm
and
claude
committed
security: Redact environment variable values in prompts (H2)

williajm
and
claude
committed
security: Prevent rate limiter memory exhaustion DoS (H5)
williajm
committed
test: Add list-based command validation tests
williajm
committed
security: Set restrictive permissions on audit log files (L2)
williajm
committed
chore: Release v1.1.1
williajm
committed
refactor: Reduce cognitive complexity in generate_compose prompt
williajm
committed
security: Block path traversal in volume mount validation (P1)
williajm
committed
fix: Cleanup idle clients in rate limiter to prevent permanent DoS
williajm
committed
fix: Rate limiter race condition causing CI test failures

williajm
and
claude
committed
docs: Add rate limiter race condition fix to CHANGELOG

williajm
and
claude
committed
fix: P1 - Rate limiter memory exhaustion from unique client IDs

williajm
and
claude
committed
fix: P1 - Implement LRU eviction for idle clients in rate limiter

williajm
and
claude
committed
docs: Clean up CHANGELOG - remove internal debugging details
williajm
committed
fix: CRITICAL - Apply environment variable validation in CreateContainerTool

williajm
and
claude
committed
docs: Clean up CHANGELOG - remove internal implementation details
williajm
committed
fix: Allow ampersands and pipes in environment variables

williajm
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: Simple volume mount validation for Linux#115

feat: Simple volume mount validation for Linux#115
williajm merged 25 commits into
mainfrom
fix/simple-volume-validation

Commits on Nov 15, 2025

feat: Add simple volume mount validation for Linux

feat: Add simple volume mount validation for Linux

chore: Remove accidental Gemini workflows

chore: Remove security review files from git, keep locally

chore: Remove validation proposal from git, keep locally

test: Add comprehensive unit tests for volume mount validation

feat: Enhance credential directory protection with substring matching

docs: Fix misleading claims about OAuth in startup scripts

security: Fix command injection via environment variables (H1)

security: Redact environment variable values in prompts (H2)

security: Prevent rate limiter memory exhaustion DoS (H5)

test: Add list-based command validation tests

security: Set restrictive permissions on audit log files (L2)

chore: Release v1.1.1

refactor: Reduce cognitive complexity in generate_compose prompt

security: Block path traversal in volume mount validation (P1)

fix: Cleanup idle clients in rate limiter to prevent permanent DoS

fix: Rate limiter race condition causing CI test failures

docs: Add rate limiter race condition fix to CHANGELOG

fix: P1 - Rate limiter memory exhaustion from unique client IDs

fix: P1 - Implement LRU eviction for idle clients in rate limiter

docs: Clean up CHANGELOG - remove internal debugging details

fix: CRITICAL - Apply environment variable validation in CreateContainerTool

docs: Clean up CHANGELOG - remove internal implementation details

fix: Allow ampersands and pipes in environment variables