Commit graph

621 commits

Author SHA1 Message Date
Reinier Criel
a0dc6536b1
Merge pull request #147 from AikidoSec/feature/cert-beta
Create INI file for pip to make sure behavior is predictable
2025-11-21 13:27:57 -08:00
Reinier Criel
72bf44cb6d Fix linting issue 2025-11-21 10:31:57 -08:00
Reinier Criel
ab1aa0dce9 Little cleanup 2025-11-21 09:58:43 -08:00
Reinier Criel
0a0ac85542 Adapt per review 2025-11-21 09:41:07 -08:00
bitterpanda
f030b16adf
rm obvious comments 2025-11-21 13:33:33 +01:00
Reinier Criel
0e5b9b23f1 Fix tests 2025-11-17 10:18:47 -08:00
Reinier Criel
87fcb7239a Adapt per review 2025-11-17 10:03:38 -08:00
Sander Declerck
41998dff95
Describe safe-chain setup --include-python in documentation. 2025-11-14 14:18:12 +01:00
Sander Declerck
c6bcd6f646
Add feature flag in setup for python support. 2025-11-14 14:12:44 +01:00
Sander Declerck
59963a6f34
Make warning in readme less prominent 2025-11-14 11:40:29 +01:00
Sander Declerck
ddf867bf53
Fix readme indentation 2025-11-14 10:41:53 +01:00
Sander Declerck
de27856640
Merge branch 'main' into package-min-age 2025-11-14 10:36:34 +01:00
bitterpanda
4b5bef8d6a
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-14 10:35:57 +01:00
Sander Declerck
157725a25a
Cleanup 2025-11-14 10:29:09 +01:00
Sander Declerck
290a630526
Better header check + remove last-modified header 2025-11-14 10:23:06 +01:00
Sander Declerck
40523f29dd
Document minimum package age in README.md 2025-11-14 09:30:58 +01:00
bitterpanda
86fb69a931
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-14 09:30:58 +01:00
Sander Declerck
06b287d4d4
Use correct header collection for forwarding 2025-11-14 09:08:27 +01:00
Reinier Criel
7039961d4c Bugfix 2025-11-13 15:50:37 -08:00
Reinier Criel
0b3cc1c175 Some more cleanup 2025-11-13 15:50:14 -08:00
Reinier Criel
474d91d29a Indentation 2025-11-13 13:32:49 -08:00
Reinier Criel
f4ff18304a Fix imports 2025-11-13 13:20:11 -08:00
Reinier Criel
4ee18973de Fix unit test 2025-11-13 12:48:04 -08:00
Reinier Criel
a0e24b1722 Update comments 2025-11-13 11:21:53 -08:00
Reinier Criel
84b8c2f2cf Merge branch 'main' into feature/cert-beta 2025-11-13 11:15:33 -08:00
Reinier Criel
61c9f1a1ef Merge config file if it exists 2025-11-13 11:14:45 -08:00
Sander Declerck
59fa76a42f
Notify the user when we modified the package versions 2025-11-13 17:10:22 +01:00
Sander Declerck
dc6f37b3ec
Remove etag from response when modifying headers 2025-11-13 16:27:42 +01:00
Sander Declerck
752504dcc8
Add --safe-chain-skip-minimum-package-age cli flag 2025-11-13 16:04:24 +01:00
Sander Declerck
f64ee3bccf
Add skipMinimumPackageAge. 2025-11-13 15:14:44 +01:00
Sander Declerck
a9a4d76705
Fix type error in modifyNpmInfo.js 2025-11-13 15:08:36 +01:00
Sander Declerck
6b208a8730
Merge pull request #150 from AikidoSec/bitterpanda63-patch-1-1
Mark python support as beta for now
2025-11-13 14:53:45 +01:00
Sander Declerck
6ae93686b7
Finish npm info modification. 2025-11-13 14:51:57 +01:00
Reinier Criel
fbd11c6d44 Update 2025-11-12 14:01:06 -08:00
Reinier Criel
285906ea9d Update doc 2025-11-12 13:39:58 -08:00
Reinier Criel
f215368c4a Some small fixes 2025-11-12 13:30:22 -08:00
Reinier Criel
fdef9e0766 Some tweaks 2025-11-12 13:11:02 -08:00
bitterpanda
988507f8e1
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-12 16:15:32 +01:00
Sander Declerck
3b905d490b
Merge branch 'main' into package-min-age 2025-11-12 14:42:19 +01:00
bitterpanda
bb0d06cdfc
Merge pull request #144 from AikidoSec/only-write-stdout-when-safe-chain-audited
Add interceptors for MITM
2025-11-12 14:27:27 +01:00
Sander Declerck
27bf768cc6
Remove blockResponse function entirely 2025-11-12 14:12:45 +01:00
Sander Declerck
d8007f6236
Cleanup interceptorBuilder.js 2025-11-12 14:07:35 +01:00
Sander Declerck
ad6d9bcdd5
Simplify interceptor code and rename variables for clarity. 2025-11-12 14:03:33 +01:00
Sander Declerck
2cf23d5109
Don't expose blockRequest 2025-11-12 13:43:47 +01:00
Sander Declerck
8bd2ace3db
Remove too new packages from npm response 2025-11-12 13:39:17 +01:00
Reinier Criel
f2bf5869ba Fix linting issue 2025-11-11 15:49:25 -08:00
Reinier Criel
a3d57cbd24 Cleanup 2025-11-11 15:24:59 -08:00
Reinier Criel
6bcd3d3b8f Make sure we don't override any environments 2025-11-11 15:22:06 -08:00
Reinier Criel
f9d241e474 Fix unused import 2025-11-11 14:32:12 -08:00
Reinier Criel
6a94271a10 Do not add list of trusted hosts, is security risk 2025-11-11 14:28:31 -08:00