Commit graph

490 commits

Author SHA1 Message Date
Sander Declerck
23c8a2e324
Merge pull request #91 from AikidoSec/escape-special-chars-in-shell
Escape special chars in shell scripts
2025-10-27 11:29:09 +01:00
Sander Declerck
0029a7e1c1
Add extra comments for regex clarification 2025-10-27 10:49:26 +01:00
Reinier Criel
9dacf5cff3 Revert package-lock.json to match main 2025-10-25 14:27:05 -07:00
Reinier Criel
598ddc17fa Fix linting issue 2025-10-25 14:14:36 -07:00
Reinier Criel
38d3b46939 Some more cleanup 2025-10-25 14:03:19 -07:00
Reinier Criel
41fda7f6ed Update logging for audit 2025-10-25 13:35:18 -07:00
Reinier Criel
30a347d0b3 Cleanup readme 2025-10-24 13:51:54 -07:00
Reinier Criel
9914c0ccb3 Some fixes 2025-10-24 13:47:22 -07:00
Reinier Criel
6b2db6dace Fix ranges issue 2025-10-24 13:14:57 -07:00
Reinier Criel
15785fad73 Make sure we use a different version.txt to prevent having to redownload DB 2025-10-24 09:59:53 -07:00
Sander Declerck
f5f3b91b40
Test if command is safe to execute 2025-10-24 17:36:51 +02:00
Sander Declerck
d6dda73fb9
WIP 2025-10-24 16:21:14 +02:00
Reinier Criel
b5988e19c1 Some more cleanup 2025-10-23 13:11:51 -07:00
Reinier Criel
059cba06bc Implement e2e tests 2025-10-23 11:41:13 -07:00
Reinier Criel
f817bf887a Update documentation 2025-10-23 10:23:42 -07:00
Reinier Criel
c85802dd2e Undo unnecessary changes 2025-10-23 09:17:13 -07:00
Reinier Criel
1fdb15a392 Fix some border cases 2025-10-23 09:14:05 -07:00
Sander Declerck
0f164d055f
Fix mocking in tests 2025-10-23 17:48:26 +02:00
Sander Declerck
9a78cafbfd
Introduce silent mode to disable logging 2025-10-23 17:45:03 +02:00
Sander Declerck
7a55be49f4
Fix linting error 2025-10-23 13:29:14 +02:00
Sander Declerck
08c1328b52
Cleanup code, add some tests 2025-10-23 13:23:08 +02:00
Sander Declerck
c74c23b0ff
Fix unit tests 2025-10-23 10:52:03 +02:00
Sander Declerck
8447d3cac5
Merge branch 'main' into escape-special-chars-in-shell 2025-10-23 09:52:38 +02:00
Hans Ott
7e72ae7d3d
On Unix/macOS, pass args to spawn to avoid escaping issues 2025-10-23 09:46:15 +02:00
Reinier Criel
1b82aeb6b0 Adapt the structure to parse the initial pip commands 2025-10-22 15:28:27 -07:00
Reinier Criel
982da4aa77 more cleanup 2025-10-22 15:16:53 -07:00
Reinier Criel
fbb7e0f95f Add tests 2025-10-22 14:51:44 -07:00
Reinier Criel
1f707c1e13 Add cert 2025-10-22 09:43:40 -07:00
Reinier Criel
246071363a Merge branch 'main' into feature/pypi 2025-10-22 07:15:17 -07:00
Reinier Criel
8b9ffc28ed Some cleanup 2025-10-22 07:04:35 -07:00
Reinier Criel
f086aeb2be Skeleton 2025-10-22 06:59:32 -07:00
Sander Declerck
2e1ee0dfa4
Merge pull request #119 from AikidoSec/proxy-unit-tests
Add tests for the proxy
2025-10-22 15:47:16 +02:00
Sander Declerck
f4cdf91fc9
Add tests for the proxy 2025-10-22 15:41:33 +02:00
Reinier Criel
d0f2edec0a Skeleton 2025-10-21 15:25:12 -07:00
bitterpanda
6a69eec342
Merge pull request #114 from AikidoSec/handle-package-without-version
Fix crash when a package does not contain a version (retracted packages)
2025-10-21 15:57:11 +02:00
Sander Declerck
1ded3899b0
Commit new tests 2025-10-21 14:56:46 +02:00
Sander Declerck
da865f855d
Fix crash when a package does not contain a version (retracted packages) 2025-10-21 14:29:17 +02:00
Sander Declerck
b935f8d4f4
Merge pull request #105 from AikidoSec/kill-dry-run
Remove dry-run scanner for npm, relying on the proxy to block maliscious package downloads instead
2025-10-15 12:04:26 +02:00
bitterpanda
e123c0e019
Merge pull request #106 from AikidoSec/remove-abbrev-package
Remove abbrev package
2025-10-15 12:03:07 +02:00
bitterpanda
9cec5e4bc9
Merge pull request #108 from AikidoSec/proxy-http-requests
Allow the safe-chain to act as a regular http proxy too (besides the CONNECT tunneling implementation)
2025-10-15 12:02:40 +02:00
Sander Declerck
05354ba2f0
Add some more comments on why http / https is handled in different code paths 2025-10-15 11:56:03 +02:00
Sander Declerck
3e8ce13db5
Move generated abbrevs to a separate file 2025-10-15 11:51:56 +02:00
Sander Declerck
37ef3e187b
Further cleanup 2025-10-15 09:25:24 +02:00
Sander Declerck
fce7550609
Cleanup debugging code from test again 2025-10-15 09:21:23 +02:00
Sander Declerck
056a1963e3
Remove test again 2025-10-15 09:18:11 +02:00
Sander Declerck
3aec473755
Without safe-chain 2025-10-15 08:50:13 +02:00
Sander Declerck
1f2d4e86c7
Add registry to localhost again 2025-10-15 07:54:35 +02:00
Sander Declerck
1a8d58889c
Try again 2025-10-15 07:50:56 +02:00
Sander Declerck
b4f7d84563
Run npm install command 2025-10-15 07:50:13 +02:00
Sander Declerck
24bda852d0
Redo test - start simple 2025-10-15 07:42:16 +02:00