899 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Reinier Criel	5cb1bb935b	More cleanup'	2025-11-25 15:03:33 -08:00
Reinier Criel	e03bceba88	Some cleanup	2025-11-25 14:37:31 -08:00
Reinier Criel	cab3a0aba3	Add uv (Astral Python package manager) support ... - Add uv package manager implementation following pip pattern - Configure MITM proxy with CA bundle for PyPI packages - Add shell integration (bash/zsh/fish/PowerShell) - Conditional on --include-python flag - Add 33 comprehensive E2E tests covering: - uv pip install/sync/compile commands - uv add for project dependencies - uv tool install for global tools - uv run --with for ephemeral dependencies - uv sync for project syncing - Malware blocking verification for all methods - Update documentation and package.json - Install uv in Docker test environment	2025-11-25 14:10:20 -08:00
Sander Declerck	5b6fe659c2	Merge pull request #164 from AikidoSec/remove-safe-chain-bun ... Remove the safe-chain-bun package	2025-11-25 16:07:23 +01:00
Sander Declerck	156522912e	Remove the safe-chain-bun package	2025-11-25 15:10:42 +01:00
Sander Declerck	1d50748f32	Merge pull request #163 from AikidoSec/remove-ora ... Remove ora dependency	2025-11-25 15:07:45 +01:00
Sander Declerck	77e9d3d843	Fix e2e tests	2025-11-25 14:56:12 +01:00
Sander Declerck	c8df7566b5	Remove ora dependency	2025-11-25 14:22:31 +01:00
Sander Declerck	eac173dfa3	Update intro in README.md	2025-11-25 12:31:50 +01:00
Sander Declerck	d158e15c08	Merge pull request #159 from AikidoSec/publish-using-oidc ... Publish using OIDC	2025-11-25 09:16:17 +01:00
Hans Ott	e976c28b8a	Publish using OIDC	2025-11-24 18:45:14 +01:00
Sander Declerck	fb3a8582a2	Merge pull request #158 from AikidoSec/prevent-packagemanager-from-caching-modified-response ... Prevent package manager from caching modified response	2025-11-24 18:37:44 +01:00
Sander Declerck	c695d0cb5d	Add explaining comment	2025-11-24 18:29:35 +01:00
Sander Declerck	5629b640cc	Prevent package manager from caching modified response	2025-11-24 18:16:09 +01:00
Sander Declerck	f6400e9822	Merge pull request #151 from AikidoSec/package-min-age ... npm: Minimum package age	2025-11-24 16:14:02 +01:00
Sander Declerck	900bf8e6ea	Parse npm registry's timestamps.	2025-11-24 15:52:17 +01:00
Sander Declerck	ea75179143	Update readme to reflect our support for node 16+ and delete broken screenshot.	2025-11-24 15:31:30 +01:00
Sander Declerck	0a8dacda24	Add small comment on why we're removing the host header before forwarding.	2025-11-24 15:31:30 +01:00
Sander Declerck	faae0488c8	Undo small refactor	2025-11-24 15:31:30 +01:00
Sander Declerck	44ee58aa9b	Let modifyNpmInfoRequestHeaders return the header collection as well.	2025-11-24 15:31:30 +01:00
Sander Declerck	5834229427	Add comment in interceptorBuilder.js to clarify which api is for setup, and which api is used by the proxy.	2025-11-24 15:31:30 +01:00
Sander Declerck	9a1092199d	Move getHeaderValueAsString to separate utils file	2025-11-24 15:31:30 +01:00
Sander Declerck	78c8da6fae	Restore old "how it works" text in Readme.md	2025-11-24 15:31:30 +01:00
Sander Declerck	e02e36cfea	Apply suggestion from @bitterpanda63 ... Adds comment about "utf8" encoding of json response. Co-authored-by: bitterpanda <bitterpanda@proton.me>	2025-11-24 14:49:40 +01:00
Sander Declerck	f7de81645c	Fix cliArgument.js merge issue	2025-11-24 14:17:47 +01:00
Sander Declerck	a04bea26da	Merge branch 'main' into package-min-age	2025-11-24 14:15:55 +01:00
Sander Declerck	f34fb3576d	Merge pull request #152 from AikidoSec/pypi-feature-flag ... Add feature flag in setup for python support.	2025-11-24 10:00:23 +01:00
Reinier Criel	a0dc6536b1	Merge pull request #147 from AikidoSec/feature/cert-beta ... Create INI file for pip to make sure behavior is predictable	2025-11-21 13:27:57 -08:00
Reinier Criel	72bf44cb6d	Fix linting issue	2025-11-21 10:31:57 -08:00
Reinier Criel	ab1aa0dce9	Little cleanup	2025-11-21 09:58:43 -08:00
Reinier Criel	0a0ac85542	Adapt per review	2025-11-21 09:41:07 -08:00
bitterpanda	f030b16adf	rm obvious comments	2025-11-21 13:33:33 +01:00
Reinier Criel	0e5b9b23f1	Fix tests	2025-11-17 10:18:47 -08:00
Reinier Criel	87fcb7239a	Adapt per review	2025-11-17 10:03:38 -08:00
Sander Declerck	41998dff95	Describe safe-chain setup --include-python in documentation.	2025-11-14 14:18:12 +01:00
Sander Declerck	c6bcd6f646	Add feature flag in setup for python support.	2025-11-14 14:12:44 +01:00
Sander Declerck	59963a6f34	Make warning in readme less prominent	2025-11-14 11:40:29 +01:00
Sander Declerck	ddf867bf53	Fix readme indentation	2025-11-14 10:41:53 +01:00
Sander Declerck	de27856640	Merge branch 'main' into package-min-age	2025-11-14 10:36:34 +01:00
bitterpanda	4b5bef8d6a	Clarify support for ecosystems and pip status ... Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.	2025-11-14 10:35:57 +01:00
Sander Declerck	157725a25a	Cleanup	2025-11-14 10:29:09 +01:00
Sander Declerck	290a630526	Better header check + remove last-modified header	2025-11-14 10:23:06 +01:00
Sander Declerck	40523f29dd	Document minimum package age in README.md	2025-11-14 09:30:58 +01:00
bitterpanda	86fb69a931	Clarify support for ecosystems and pip status ... Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.	2025-11-14 09:30:58 +01:00
Sander Declerck	06b287d4d4	Use correct header collection for forwarding	2025-11-14 09:08:27 +01:00
Reinier Criel	7039961d4c	Bugfix	2025-11-13 15:50:37 -08:00
Reinier Criel	0b3cc1c175	Some more cleanup	2025-11-13 15:50:14 -08:00
Reinier Criel	474d91d29a	Indentation	2025-11-13 13:32:49 -08:00
Reinier Criel	f4ff18304a	Fix imports	2025-11-13 13:20:11 -08:00
Reinier Criel	4ee18973de	Fix unit test	2025-11-13 12:48:04 -08:00