Sander Declerck
05f7c8f877
Merge pull request #293 from AikidoSec/min-package-age-exclusion
...
Min package age exclusion
2026-01-15 16:08:33 +01:00
Sander Declerck
6c814ff82f
Only allow wildcards for scoped packages (@scope/*)
2026-01-15 15:13:00 +01:00
Reinier Criel
b6b880d21a
Merge pull request #287 from AikidoSec/bug/win32-command-parsing-beta
...
Fix double dash argument forwarding on Win32 PowerShell
2026-01-14 20:09:56 +01:00
Sander Declerck
884cb6e026
Allow trailing * for wildcard matching
2026-01-14 17:51:41 +01:00
Sander Declerck
6815b62019
Allow to exclude packages from the minimum package age
2026-01-14 17:41:23 +01:00
bitterpanda
9d55afbf85
Update packages/safe-chain/src/api/aikido.js
2026-01-14 15:33:09 +01:00
Sander Declerck
6f4eaf5234
Don't swallow error on retry
2026-01-14 15:31:37 +01:00
Sander Declerck
a5d545f29b
Handle pr comments
2026-01-14 14:55:11 +01:00
Sander Declerck
8d2655a4bf
Add tests for malware db retry
2026-01-14 14:41:06 +01:00
Sander Declerck
d83a381231
Retry downloading the malware database 3 times
2026-01-14 14:02:27 +01:00
bitterpanda
c38f1bcb3e
Update packages/safe-chain/src/registryProxy/interceptors/npm/modifyNpmInfo.js
2026-01-13 19:33:00 +01:00
Reinier Criel
f678ff8dd1
Include package name in logging when minimum package age is not met
2026-01-13 10:09:59 -08:00
Reinier Criel
340e9a90a5
Remove comment
2026-01-12 15:13:34 -08:00
Reinier Criel
9a902af917
Fix some logic
2026-01-12 15:12:19 -08:00
Reinier Criel
19652c49c9
Attempted fix for powershell swallowing '--'
2026-01-12 14:53:23 -08:00
Sander Declerck
595f269f62
Add comment about backwards compat.
2026-01-12 11:20:25 +01:00
Sander Declerck
3573ef2bc5
Allow to configure loglevel through an env variable
2026-01-12 10:50:06 +01:00
Sander Declerck
094d1416ca
Merge pull request #272 from graemechapman/patch-1
...
fix: Allow running commands if safe-chain npm package is not installed
2026-01-07 12:03:19 +01:00
Sander Declerck
8bfbe1c77d
Merge pull request #232 from galargh/pip-custom-registries
...
feat: allow python custom registries configuration
2026-01-05 14:01:51 +01:00
Sander Declerck
74c57cd86a
Merge pull request #262 from AikidoSec/safe-chain-verify-command
...
Add command to verify safe-chain is intercepting the package managers commands
2026-01-05 09:10:05 +01:00
galargh
b23ba9d9c4
chore: update test parametrization
2026-01-02 10:39:15 +01:00
Graeme Chapman
c510d886a9
Simplify command execution in init-posix.sh
2025-12-31 10:57:08 +00:00
Graeme Chapman
a0e19818a0
fix: Allow running commands if safe-chain npm package is not installed
2025-12-31 10:18:58 +00:00
galargh
c53a7347e2
feat: allow python custom registries configuration through config file
2025-12-22 13:49:45 +01:00
galargh
39e2001d97
Merge remote-tracking branch 'origin/main' into pip-custom-registries
2025-12-22 13:27:04 +01:00
jassanw
3b6beb7f16
default to port 443 if port is null or empty
2025-12-19 18:49:58 -08:00
cherryace
bd19f477f7
Using port from req url when creating proxy request instead of hardcoded port 443
2025-12-19 17:57:33 -08:00
Sander Declerck
b571aad6a0
Add command to verify safe-chain is intercepting the package managers commands
2025-12-19 16:18:21 +01:00
Sander Declerck
53c59e35e9
Merge pull request #258 from thomasbecker/fix/connection-timeout-issue-228
...
fix: use true connection timeout instead of idle timeout
2025-12-19 11:05:53 +01:00
Sander Declerck
120e12fd34
Merge pull request #259 from AikidoSec/configure-custom-npm-registries
...
Allow to configure custom/private npm registries
2025-12-19 10:42:51 +01:00
Reinier Criel
bbf5f8189b
Merge pull request #256 from AikidoSec/feature/pipx-2
...
Add PIPX support
2025-12-19 09:41:00 +01:00
Sander Declerck
9f93763b98
Handle code quality comments
2025-12-18 18:18:45 +01:00
Sander Declerck
deb0ad5428
Create a single emptyConfig object
2025-12-18 18:03:09 +01:00
Sander Declerck
e3aa2e15cb
Add npmjs.com to known registries too.
2025-12-18 17:59:15 +01:00
Sander Declerck
41cc24d1f5
Allow to configure custom/prinvate npm registries
2025-12-18 13:52:49 +01:00
Reinier Criel
287bd7a41f
Remove redundant comment
2025-12-18 13:41:18 +01:00
Reinier Criel
6ce3791140
Fix check
2025-12-18 13:37:29 +01:00
Thomas Becker
878e549211
fix: use true connection timeout instead of idle timeout
...
socket.setTimeout() is an idle timeout in Node.js (node docs)[https://nodejs.org/api/net.html#socketsettimeouttimeout-callback ]
- it fires after N ms of inactivity, not N ms after the connection attempt. This
caused false timeout errors after successful data transfers when connections
went idle for longer than the timeout period.
Replace with JS setTimeout() that:
- Fires N ms after connection attempt starts
- Gets cleared on successful connect
- Return 504 Gateway Timeout (more accurate than 502)
Also adds proper close event handlers for socket cleanup.
Fixes #228
2025-12-18 12:53:49 +01:00
Reinier Criel
28f34a8380
Fix env func
2025-12-18 12:09:28 +01:00
Reinier Criel
a1d348b768
Fix test
2025-12-18 11:45:43 +01:00
Reinier Criel
dbc7272fb4
Some cleanup
2025-12-18 10:43:27 +01:00
Reinier Criel
d2fc531c81
Fix tests and add command support
2025-12-18 10:33:31 +01:00
Reinier Criel
b9de94f0f1
Merge branch 'main' into feature/pipx-2
2025-12-17 14:28:14 +01:00
Reinier Criel
5de43c1bf2
Some modifications
2025-12-17 13:26:14 +01:00
Reinier Criel
3c18ad76f7
Skeleton
2025-12-17 11:37:51 +01:00
bitterpanda
9db8a2cc24
Merge pull request #250 from AikidoSec/bug/py-flag-warning
...
Emit deprecation warning when --include-python flag is used
2025-12-16 15:25:38 +01:00
Reinier Criel
379cd20154
Fix linter issue
2025-12-16 15:05:03 +01:00
Reinier Criel
a47ea153da
Simplify
2025-12-16 14:53:30 +01:00
Reinier Criel
037a83e1ff
Print warning if deprecated --include-python flag is given
2025-12-16 14:47:53 +01:00
Sander Declerck
316922e9a6
Merge branch 'main' into fix-powershell-install-script-path-separator
2025-12-16 13:06:57 +01:00
