a939e693d0
Release 0.2.1
...
Security release for the k7-api control plane.
Fixes a server-side request forgery reachable through a sandbox's image
registry host: registry hosts are now resolved and checked against
public/allowlisted ranges before any OCI fetch, the localhost-to-plain-HTTP
downgrade is gone, and redirects are disabled so an allowlisted host cannot
bounce the request inward.
Adds optional per-key namespace authorization, so an API key can be
confined to the namespaces it owns and cannot perform all-namespaces
operations. Keys without a scope keep their previous unrestricted
behaviour, so upgrading changes nothing until you scope your keys.
Both issues were reported privately by Jirayu Thongchotchaung, who held
disclosure until this release was available. See CHANGELOG.md and the
published advisories for detail.
2026-08-16 00:16:48 +02:00
ecb7630168
README: drop website badge
2026-08-12 02:52:18 +02:00
d31045a93f
CLI build: install click explicitly (typer 0.27 dropped the hard dep)
2026-08-12 00:27:38 +02:00
2edbcf21f5
Fix CLI onefile build: bundle click explicitly
2026-08-12 00:22:43 +02:00
d65ea43536
Release 0.2.0
...
See CHANGELOG.md for what shipped.
2026-08-12 00:01:43 +02:00
5731452338
fixed small mistake
2025-12-14 13:52:34 +01:00
28d206a8c1
added fast dev workflow to avoid need to make build during dev
2025-12-14 13:50:26 +01:00
685358bef6
fixed race condition and usage of -o pipeline in shell
2025-12-14 13:49:48 +01:00
e5d725fee1
added guidance about linux cap usage for package manager install permissions in sandbox
2025-12-14 13:48:45 +01:00
2781352aff
Merge pull request #7 from srcreigh/main
...
Don't deploy debug binaries to /usr/local/bin
2025-10-31 23:11:28 +03:00
0c59b726d0
Don't deploy debug binaries to /usr/local/bin
2025-10-26 19:05:31 -04:00
8b7457c350
bumping README and ROADMAP
2025-10-25 02:48:29 +03:00
1fccf72155
Merge pull request #4 from spullara/main
...
Add ARM64 support
2025-10-25 02:39:54 +03:00
24f530ff79
Merge pull request #6 from Katakate/fix/no-dns-res-in-lockdown
...
Fix/no dns res in lockdown
2025-10-25 02:22:06 +03:00
686ab951d1
updated docs with dns-exfiltration-safe defaults and security note
2025-10-25 02:21:42 +03:00
7a8787245e
Merge pull request #5 from Katakate/feature/custom-disk-path
...
--disk flag for k7 install
2025-10-25 01:24:37 +03:00
5d0b6ec07b
Merge branch 'Katakate:main' into main
2025-10-24 14:32:48 -07:00
298e7d7953
make it build on both amd64 and arm64
2025-10-24 14:31:52 -07:00
8555a06ddc
removing dns res in egress lockdowns to avoid dns exfiltrations
2025-10-23 22:47:13 +03:00
d9c726a810
--disk flag for k7 install
2025-10-23 22:27:36 +03:00
f48ae38b9a
roadmap
2025-10-23 22:12:02 +03:00
57089ab047
featured in console.dev
2025-10-23 22:03:22 +03:00
99c4c0da3d
bump to 0.0.4-dev to avoid local build conflicts
2025-10-23 22:03:01 +03:00
0e73a88632
Small readme update
2025-10-23 22:01:58 +03:00
75e2a4958d
#1 on Show HN
2025-10-22 23:36:23 +03:00
8c24068547
#1 on Show HN
2025-10-21 23:16:03 +03:00
459654ec3a
added ask deepwiki badge
2025-10-19 13:03:44 +02:00
0d6ef24217
initial commit
2025-10-19 12:26:13 +02:00
G