Commit graph

862 commits

Author SHA1 Message Date
Reinier Criel
f5af26092a Fix cert issues in Virtual Environments 2025-11-26 15:48:29 -08:00
Reinier Criel
9c55a95eb9 Fix e2e tests 2025-11-26 14:31:11 -08:00
Reinier Criel
4bfc315b57 Skeleton 2025-11-26 14:13:49 -08:00
Hans Ott
da1d76e43f Update banner with new tag line 2025-11-26 18:23:53 +01:00
Hans Ott
3140dcc071 Add banner for safe-chain 2025-11-26 17:40:18 +01:00
Sander Declerck
a57c37b58d
Merge pull request #176 from AikidoSec/min-package-age-configuration 2025-11-26 17:24:25 +01:00
Sander Declerck
9b5b3cad22
Rename the environment variable 2025-11-26 16:47:46 +01:00
Sander Declerck
3e6ff1ab56
Update readme file 2025-11-26 16:46:01 +01:00
Sander Declerck
13892efa70
Allow to configure the minimum package age 2025-11-26 16:42:51 +01:00
Sander Declerck
dc6c657d41
Merge pull request #162 from AikidoSec/readme-update-intro
Update intro in README.md
2025-11-26 16:41:55 +01:00
Sander Declerck
3ceed1fc4b
Merge branch 'main' into readme-update-intro 2025-11-26 16:31:41 +01:00
bitterpanda
5c3c3399d9
Merge pull request #168 from AikidoSec/feature/uv
Add uv (Astral Python Package Mgr) support
2025-11-26 13:20:45 +01:00
Reinier Criel
023bccec11 Some more cleanup 2025-11-25 19:55:36 -08:00
Reinier Criel
5cb1bb935b More cleanup' 2025-11-25 15:03:33 -08:00
Reinier Criel
e03bceba88 Some cleanup 2025-11-25 14:37:31 -08:00
Reinier Criel
cab3a0aba3 Add uv (Astral Python package manager) support
- Add uv package manager implementation following pip pattern
- Configure MITM proxy with CA bundle for PyPI packages
- Add shell integration (bash/zsh/fish/PowerShell)
- Conditional on --include-python flag
- Add 33 comprehensive E2E tests covering:
  - uv pip install/sync/compile commands
  - uv add for project dependencies
  - uv tool install for global tools
  - uv run --with for ephemeral dependencies
  - uv sync for project syncing
  - Malware blocking verification for all methods
- Update documentation and package.json
- Install uv in Docker test environment
2025-11-25 14:10:20 -08:00
Sander Declerck
5b6fe659c2
Merge pull request #164 from AikidoSec/remove-safe-chain-bun
Remove the safe-chain-bun package
2025-11-25 16:07:23 +01:00
Sander Declerck
156522912e
Remove the safe-chain-bun package 2025-11-25 15:10:42 +01:00
Sander Declerck
1d50748f32
Merge pull request #163 from AikidoSec/remove-ora
Remove ora dependency
2025-11-25 15:07:45 +01:00
Sander Declerck
77e9d3d843
Fix e2e tests 2025-11-25 14:56:12 +01:00
Sander Declerck
c8df7566b5
Remove ora dependency 2025-11-25 14:22:31 +01:00
Sander Declerck
eac173dfa3
Update intro in README.md 2025-11-25 12:31:50 +01:00
Sander Declerck
d158e15c08
Merge pull request #159 from AikidoSec/publish-using-oidc
Publish using OIDC
2025-11-25 09:16:17 +01:00
Hans Ott
e976c28b8a Publish using OIDC 2025-11-24 18:45:14 +01:00
Sander Declerck
fb3a8582a2
Merge pull request #158 from AikidoSec/prevent-packagemanager-from-caching-modified-response
Prevent package manager from caching modified response
2025-11-24 18:37:44 +01:00
Sander Declerck
c695d0cb5d
Add explaining comment 2025-11-24 18:29:35 +01:00
Sander Declerck
5629b640cc
Prevent package manager from caching modified response 2025-11-24 18:16:09 +01:00
Sander Declerck
f6400e9822
Merge pull request #151 from AikidoSec/package-min-age
npm: Minimum package age
2025-11-24 16:14:02 +01:00
Sander Declerck
900bf8e6ea
Parse npm registry's timestamps. 2025-11-24 15:52:17 +01:00
Sander Declerck
ea75179143
Update readme to reflect our support for node 16+ and delete broken screenshot. 2025-11-24 15:31:30 +01:00
Sander Declerck
0a8dacda24
Add small comment on why we're removing the host header before forwarding. 2025-11-24 15:31:30 +01:00
Sander Declerck
faae0488c8
Undo small refactor 2025-11-24 15:31:30 +01:00
Sander Declerck
44ee58aa9b
Let modifyNpmInfoRequestHeaders return the header collection as well. 2025-11-24 15:31:30 +01:00
Sander Declerck
5834229427
Add comment in interceptorBuilder.js to clarify which api is for setup, and which api is used by the proxy. 2025-11-24 15:31:30 +01:00
Sander Declerck
9a1092199d
Move getHeaderValueAsString to separate utils file 2025-11-24 15:31:30 +01:00
Sander Declerck
78c8da6fae
Restore old "how it works" text in Readme.md 2025-11-24 15:31:30 +01:00
Sander Declerck
e02e36cfea
Apply suggestion from @bitterpanda63
Adds comment about "utf8" encoding of json response.

Co-authored-by: bitterpanda <bitterpanda@proton.me>
2025-11-24 14:49:40 +01:00
Sander Declerck
f7de81645c
Fix cliArgument.js merge issue 2025-11-24 14:17:47 +01:00
Sander Declerck
a04bea26da
Merge branch 'main' into package-min-age 2025-11-24 14:15:55 +01:00
Sander Declerck
f34fb3576d
Merge pull request #152 from AikidoSec/pypi-feature-flag
Add feature flag in setup for python support.
2025-11-24 10:00:23 +01:00
Reinier Criel
a0dc6536b1
Merge pull request #147 from AikidoSec/feature/cert-beta
Create INI file for pip to make sure behavior is predictable
2025-11-21 13:27:57 -08:00
Reinier Criel
72bf44cb6d Fix linting issue 2025-11-21 10:31:57 -08:00
Reinier Criel
ab1aa0dce9 Little cleanup 2025-11-21 09:58:43 -08:00
Reinier Criel
0a0ac85542 Adapt per review 2025-11-21 09:41:07 -08:00
bitterpanda
f030b16adf
rm obvious comments 2025-11-21 13:33:33 +01:00
Reinier Criel
0e5b9b23f1 Fix tests 2025-11-17 10:18:47 -08:00
Reinier Criel
87fcb7239a Adapt per review 2025-11-17 10:03:38 -08:00
Sander Declerck
41998dff95
Describe safe-chain setup --include-python in documentation. 2025-11-14 14:18:12 +01:00
Sander Declerck
c6bcd6f646
Add feature flag in setup for python support. 2025-11-14 14:12:44 +01:00
Sander Declerck
59963a6f34
Make warning in readme less prominent 2025-11-14 11:40:29 +01:00