Commit graph

685 commits

Author SHA1 Message Date
bitterpanda
988507f8e1
Clarify support for ecosystems and pip status
Updated README to clarify that Aikido Safe Chain currently supports only JavaScript ecosystems and marks pip and pip3 as beta.
2025-11-12 16:15:32 +01:00
Sander Declerck
3b905d490b
Merge branch 'main' into package-min-age 2025-11-12 14:42:19 +01:00
bitterpanda
bb0d06cdfc
Merge pull request #144 from AikidoSec/only-write-stdout-when-safe-chain-audited
Add interceptors for MITM
2025-11-12 14:27:27 +01:00
Sander Declerck
27bf768cc6
Remove blockResponse function entirely 2025-11-12 14:12:45 +01:00
Sander Declerck
d8007f6236
Cleanup interceptorBuilder.js 2025-11-12 14:07:35 +01:00
Sander Declerck
ad6d9bcdd5
Simplify interceptor code and rename variables for clarity. 2025-11-12 14:03:33 +01:00
Sander Declerck
2cf23d5109
Don't expose blockRequest 2025-11-12 13:43:47 +01:00
Sander Declerck
8bd2ace3db
Remove too new packages from npm response 2025-11-12 13:39:17 +01:00
Reinier Criel
f2bf5869ba Fix linting issue 2025-11-11 15:49:25 -08:00
Reinier Criel
a3d57cbd24 Cleanup 2025-11-11 15:24:59 -08:00
Reinier Criel
6bcd3d3b8f Make sure we don't override any environments 2025-11-11 15:22:06 -08:00
Reinier Criel
f9d241e474 Fix unused import 2025-11-11 14:32:12 -08:00
Reinier Criel
6a94271a10 Do not add list of trusted hosts, is security risk 2025-11-11 14:28:31 -08:00
Reinier Criel
9b102412af Add extra ENV vars 2025-11-11 10:37:39 -08:00
Sander Declerck
3bf7279195
Implement modification of request headerrs 2025-11-07 16:16:37 +01:00
Reinier Criel
76acf43128
Merge pull request #142 from AikidoSec/feature/pypi-ci
[PYPI] Add CI Shims
2025-11-07 06:54:28 -08:00
Sander Declerck
76a1100b8c
Fix linter issues 2025-11-07 11:42:53 +01:00
Sander Declerck
1f570a9f39
Keep track of amount of malware packages blocked 2025-11-07 11:39:41 +01:00
Sander Declerck
f4694ba119
Move npm and pip mitm interception to separate files 2025-11-07 10:10:27 +01:00
Reinier Criel
d3a4f81b3c More cleanup 2025-11-06 13:44:34 -08:00
Reinier Criel
01cc0b06c0 Reverse e2e test removals 2025-11-06 13:40:09 -08:00
Reinier Criel
61a53b24fd Some cleanup 2025-11-06 13:24:00 -08:00
Reinier Criel
2632b5c2af Merge remote-tracking branch 'origin/feature/pypi-ci' into feature/pypi-ci 2025-11-06 13:00:46 -08:00
Reinier Criel
a293c76ed9 Add better logging 2025-11-06 12:53:24 -08:00
Reinier Criel
e88aede939 Remove some debug logging 2025-11-06 12:25:55 -08:00
Reinier Criel
dd2894faab Extend test 2025-11-06 11:30:13 -08:00
Reinier Criel
032fc3847f Fix args 2025-11-06 11:09:28 -08:00
Reinier Criel
9bd29056c6 Some cleanup 2025-11-06 11:02:03 -08:00
Reinier Criel
a6956db8dc Remove debug log 2025-11-06 10:27:49 -08:00
Reinier Criel
28d24bb6ea Another iteration 2025-11-06 10:26:26 -08:00
Sander Declerck
e251908cb3
Add interceptors for MITM 2025-11-06 18:01:20 +01:00
Reinier Criel
f400c5576a WIP 2025-11-06 08:32:25 -08:00
Reinier Criel
7a39b1381b Merge branch 'feature/pypi-ci' of github.com:AikidoSec/safe-chain into feature/pypi-ci 2025-11-05 19:45:37 -08:00
Reinier Criel
0a3028329f Fix template 2025-11-05 16:32:57 -08:00
Reinier Criel
84cf485b31 Add comment explaining forwarding 2025-11-05 16:24:57 -08:00
Reinier Criel
fa4c46c23d Cleanup readme 2025-11-05 15:47:41 -08:00
Reinier Criel
7cff2818e4 Fix Windows template 2025-11-05 15:40:54 -08:00
Reinier Criel
ec4228edc1 Add more test cases 2025-11-05 11:23:37 -08:00
Reinier Criel
216e16cfb1 Fix e2e test 2025-11-05 11:13:24 -08:00
Reinier Criel
35bd3dfb6f Merge branch 'main' into feature/pypi-ci 2025-11-05 10:35:59 -08:00
bitterpanda
60dc3f6d82
Merge pull request #140 from AikidoSec/feature/pypi-remove-args-parsing
[PYPI] Remove CLI Parsing - Use MITM only
2025-11-05 19:28:19 +01:00
Reinier Criel
3b56a0181f Update comment 2025-11-05 09:55:09 -08:00
Reinier Criel
bded1fe660 Fix test 2025-11-05 09:28:57 -08:00
Reinier Criel
87606def48 Fix comments 2025-11-05 09:18:18 -08:00
Reinier Criel
3cfe00e535 Merge branch 'main' into feature/pypi-remove-args-parsing 2025-11-05 09:01:57 -08:00
bitterpanda
96860fb93d
Merge pull request #138 from AikidoSec/only-write-stdout-when-safe-chain-audited
Only write to stdout when safe-chain audited packages
2025-11-05 17:51:57 +01:00
Reinier Criel
f0a3ae51db Only use mitm for pip packages 2025-11-05 08:34:40 -08:00
Sander Declerck
0b056e92de
Merge branch 'main' into only-write-stdout-when-safe-chain-audited 2025-11-05 17:12:57 +01:00
bitterpanda
96d7c460fa
Merge pull request #139 from AikidoSec/feature/fix-e2e-tests
[PYPI e2e testing] Add extra flag to install commands
2025-11-05 17:10:50 +01:00
Reinier Criel
9f0f50eb15 Small fix 2025-11-05 07:57:29 -08:00