Commit graph

910 commits

Author SHA1 Message Date
bitterpanda
4b5bef8d6a
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-14 10:35:57 +01:00
Sander Declerck
157725a25a
Cleanup 2025-11-14 10:29:09 +01:00
Sander Declerck
290a630526
Better header check + remove last-modified header 2025-11-14 10:23:06 +01:00
Sander Declerck
40523f29dd
Document minimum package age in README.md 2025-11-14 09:30:58 +01:00
bitterpanda
86fb69a931
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-14 09:30:58 +01:00
Sander Declerck
06b287d4d4
Use correct header collection for forwarding 2025-11-14 09:08:27 +01:00
Reinier Criel
7039961d4c Bugfix 2025-11-13 15:50:37 -08:00
Reinier Criel
0b3cc1c175 Some more cleanup 2025-11-13 15:50:14 -08:00
Reinier Criel
474d91d29a Indentation 2025-11-13 13:32:49 -08:00
Reinier Criel
f4ff18304a Fix imports 2025-11-13 13:20:11 -08:00
Reinier Criel
4ee18973de Fix unit test 2025-11-13 12:48:04 -08:00
Reinier Criel
a0e24b1722 Update comments 2025-11-13 11:21:53 -08:00
Reinier Criel
84b8c2f2cf Merge branch 'main' into feature/cert-beta 2025-11-13 11:15:33 -08:00
Reinier Criel
61c9f1a1ef Merge config file if it exists 2025-11-13 11:14:45 -08:00
Sander Declerck
59fa76a42f
Notify the user when we modified the package versions 2025-11-13 17:10:22 +01:00
Sander Declerck
dc6f37b3ec
Remove etag from response when modifying headers 2025-11-13 16:27:42 +01:00
Sander Declerck
752504dcc8
Add --safe-chain-skip-minimum-package-age cli flag 2025-11-13 16:04:24 +01:00
Sander Declerck
f64ee3bccf
Add skipMinimumPackageAge. 2025-11-13 15:14:44 +01:00
Sander Declerck
a9a4d76705
Fix type error in modifyNpmInfo.js 2025-11-13 15:08:36 +01:00
Sander Declerck
6b208a8730
Merge pull request #150 from AikidoSec/bitterpanda63-patch-1-1
Mark python support as beta for now
2025-11-13 14:53:45 +01:00
Sander Declerck
6ae93686b7
Finish npm info modification. 2025-11-13 14:51:57 +01:00
Reinier Criel
fbd11c6d44 Update 2025-11-12 14:01:06 -08:00
Reinier Criel
285906ea9d Update doc 2025-11-12 13:39:58 -08:00
Reinier Criel
f215368c4a Some small fixes 2025-11-12 13:30:22 -08:00
Reinier Criel
fdef9e0766 Some tweaks 2025-11-12 13:11:02 -08:00
bitterpanda
988507f8e1
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-12 16:15:32 +01:00
Sander Declerck
3b905d490b
Merge branch 'main' into package-min-age 2025-11-12 14:42:19 +01:00
bitterpanda
bb0d06cdfc
Merge pull request #144 from AikidoSec/only-write-stdout-when-safe-chain-audited
Add interceptors for MITM
2025-11-12 14:27:27 +01:00
Sander Declerck
27bf768cc6
Remove blockResponse function entirely 2025-11-12 14:12:45 +01:00
Sander Declerck
d8007f6236
Cleanup interceptorBuilder.js 2025-11-12 14:07:35 +01:00
Sander Declerck
ad6d9bcdd5
Simplify interceptor code and rename variables for clarity. 2025-11-12 14:03:33 +01:00
Sander Declerck
2cf23d5109
Don't expose blockRequest 2025-11-12 13:43:47 +01:00
Sander Declerck
8bd2ace3db
Remove too new packages from npm response 2025-11-12 13:39:17 +01:00
Reinier Criel
f2bf5869ba Fix linting issue 2025-11-11 15:49:25 -08:00
Reinier Criel
a3d57cbd24 Cleanup 2025-11-11 15:24:59 -08:00
Reinier Criel
6bcd3d3b8f Make sure we don't override any environments 2025-11-11 15:22:06 -08:00
Reinier Criel
f9d241e474 Fix unused import 2025-11-11 14:32:12 -08:00
Reinier Criel
6a94271a10 Do not add list of trusted hosts, is security risk 2025-11-11 14:28:31 -08:00
Reinier Criel
9b102412af Add extra ENV vars 2025-11-11 10:37:39 -08:00
Sander Declerck
3bf7279195
Implement modification of request headerrs 2025-11-07 16:16:37 +01:00
Reinier Criel
76acf43128
Merge pull request #142 from AikidoSec/feature/pypi-ci
[PYPI] Add CI Shims
2025-11-07 06:54:28 -08:00
Sander Declerck
76a1100b8c
Fix linter issues 2025-11-07 11:42:53 +01:00
Sander Declerck
1f570a9f39
Keep track of amount of malware packages blocked 2025-11-07 11:39:41 +01:00
Sander Declerck
f4694ba119
Move npm and pip mitm interception to separate files 2025-11-07 10:10:27 +01:00
Reinier Criel
d3a4f81b3c More cleanup 2025-11-06 13:44:34 -08:00
Reinier Criel
01cc0b06c0 Reverse e2e test removals 2025-11-06 13:40:09 -08:00
Reinier Criel
61a53b24fd Some cleanup 2025-11-06 13:24:00 -08:00
Reinier Criel
2632b5c2af Merge remote-tracking branch 'origin/feature/pypi-ci' into feature/pypi-ci 2025-11-06 13:00:46 -08:00
Reinier Criel
a293c76ed9 Add better logging 2025-11-06 12:53:24 -08:00
Reinier Criel
e88aede939 Remove some debug logging 2025-11-06 12:25:55 -08:00