agent/.github/scripts/image-release-policy.json at e3acd64a57a787c028bb56bf2a9bceccae3de889 - agent - Gitea: Git with a cup of tea

kerberos-io/agent

mirror of https://github.com/kerberos-io/agent.git synced 2026-11-05 20:20:23 +00:00

Files

T

Cédric VerstraetenandCopilot App e3acd64a57 Align scratch runtime and releases with image hardening baseline

Move container HTTP to8080, remove capabilities/curl, preserve demo UI without mutating assets, patch vulnerable Go dependencies and document migration/runtime contracts. Gate releases on source/final-image security evidence and unresolved policy exceptions.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

2026-11-04 22:03:04 +01:00

14 lines

321 B

JSON

Raw Blame History

 {
   "required_exceptions": [
     {
       "id": "remote-terminal-pty",
       "status": "pending",
       "reason": "The product retains functional remote terminal/PTY support, contrary to the no-shell baseline.",
       "owner": null,
       "expires": null,
       "approved_by": null,
       "approval_url": null
     }
   ]
 }