kerberos-io/agent
1
0
Fork 0
mirror of https://github.com/kerberos-io/agent.git synced 2026-11-08 20:40:34 +00:00
Code Issues Packages Projects Releases Wiki Activity
1,638 Commits 31 Branches 295 Tags
7b95de7c10265b4d7f76eeb4b9c307da34fe1dab
Commit Graph
20 Commits
Author SHA1 Message Date
Cédric VerstraetenandCopilot App 7b95de7c10 Document user-directed retention of recording signing key 
Preserve the unresolved release finding without inventing an exception or changing recording trust.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-05 10:28:08 +01:00
Cédric VerstraetenandCopilot App 29537da6e8 Replace obsolete SVG loader with tested maintained SVGR alias 
Preserve precompiled shared UI and CRA rendering, explicitly scan the real replacement identity, and guard against unsupported legacy loader calls.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-05 08:55:30 +01:00
Cédric VerstraetenandCopilot App 04beb83540 Fix scanner findings and rootfs assembly lint failures 
Patch Go and compatible UI dependency paths; verify legacy toolchain integrations without bypassing release gates.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-05 08:30:19 +01:00
Cédric VerstraetenandCopilot App 85dcb841e2 Require patched Go floor and update network dependencies 
Align source security scanning with the verified Go1.26.10 compiler, disallow older vulnerable patch levels and update x/net. Preserve the remaining untriaged crypto advisory as a blocking finding rather than selecting an unreleased fixed version.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 22:30:14 +01:00
Cédric VerstraetenandCopilot App e3acd64a57 Align scratch runtime and releases with image hardening baseline 
Move container HTTP to8080, remove capabilities/curl, preserve demo UI without mutating assets, patch vulnerable Go dependencies and document migration/runtime contracts. Gate releases on source/final-image security evidence and unresolved policy exceptions.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 22:03:04 +01:00
Cédric VerstraetenandCopilot App 9553b1b4b9 Assemble a media-compatible scratch runtime image 
Build an explicit architecture-aware runtime filesystem from installed Debian package dependency manifests, preserving dynamic loaders, codecs and plugins, generated library alternatives/caches, trust data, non-root ownership and port binding. Keep shell/PTY and common runtime utilities while omitting package-management and privilege tools. Expand image smoke checks for H264/H265, font rendering, shell/PTY, package provenance, writable caches and existing startup/volume behavior.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 21:15:54 +01:00
Cédric VerstraetenandCopilot App f6ce5e0846 Pin Go 1.26 toolchain and verified multi-platform image bases 
Use Go 1.26.10 locally without automatic toolchain switching, verify downloaded modules, and build with read-only module metadata and trimmed source/VCS paths. Pin Go, Node, and Debian multi-platform manifests while retaining the compatible CGO/FFmpeg runtime and existing architecture selection. Align Go CI and document pin-refresh and ARMv6 limitations.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 20:53:40 +01:00
Cédric VerstraetenandCopilot App 024bb0abf9 Harden production Docker image and verify runtime permissions 
Exclude local secrets and mutable data from image builds, restore Go checksum verification, remove runtime capability tooling and setuid/setgid permissions, and preserve non-root media and demo startup behavior. Add native image smoke checks and document runtime constraints.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
 2026-11-04 20:42:21 +01:00
Kilian a80b375e89 Update README.md 2025-04-25 13:04:28 +02:00
Cédric Verstraeten b2b8485b28 add networks 2024-07-24 12:35:09 +02:00
Kilian c69d635431 Update docker-compose.yaml 
Update example docker compose file
 2024-07-05 15:50:30 +02:00
Cédric Verstraeten 472a40a5f6 add extra space to run command 2024-04-06 11:50:11 +02:00
Cédric Verstraeten 3f29d1c46f fix wrong docker command 2024-01-30 20:47:13 +01:00
Cedric Verstraeten c8c9a0fd6e add kerberos factory 2022-12-12 21:05:59 +01:00
Cedric Verstraeten 9012bf2bf0 some more tweaks 2022-12-09 18:27:38 +01:00
Cedric Verstraeten 0fa1943701 add username and password env + add kubernetes deployment 2022-12-09 16:50:40 +01:00
Cedric Verstraeten 2b90bdbc0b add documentation for docker compose 2022-12-08 13:01:03 +01:00
Cedric Verstraeten cd4e9eed3d add references to env. list! 2022-12-08 12:29:58 +01:00
Cedric Verstraeten 0658f9afbb add example docker compose 2022-12-07 23:02:35 +01:00
Cedric Verstraeten 47fb5b81ab intiialise deployment directory 2022-12-07 17:34:38 +01:00