Commit Graph

Select branches

Hide Pull Requests

KunalSin9h-patch-1

ci/add-security-actions

claude/debug-issue-193-XaViY

claude/debug-npm-proxy-issue-B2ceu

claude/e2e-tests-github-actions-hkxij2

claude/fix-localhost-proxy-routing-g8vcQ

claude/pmg-env-var-protection-qkpe6k

cursor/fix-bwrap-in-project-venv

cursor/linux-system-install

deps/#201-update-go-1.26

docs/add-pip-support

docs/readme-update

ebpf-poc

feat/#27-pip-support

feat/#7-manifest-files-scan

feat/32-error-messages

feat/add-support-for-active-scanning

feat/cloud-login-insecure-file-store

feat/dep-cooldown

feat/goreleaser

feat/npm-support

feat/persistent-config

feat/persistent-proxy

feat/pnpm-support

feat/proxy-install-only

feat/proxy-malysis-interceptor

fix/#16-npm-arg-parsing

fix/deps-fetch-progress-bar

fix/handle-safe-sandbox-violation-rendering

fix/image

fix/issue-10

fix/issue-3-and-4

fix/linux-sandbox-driver-probe-landlock-access

fix/manifest-file-deps-resolution

fix/misc-fixes

fix/sandbox-shai-hulud-ttp-conformance

fix/ux-improvements

issue-9-add-colorful-outputs

main

refactor/abhisek-20250512

refactor/community-api-support

sandbox-fix

skip-sandbox-e2e-for-linux

test-npm

update-readme

#1

#100

#101

#102

#104

#105

#106

#107

#108

#11

#111

#112

#113

#116

#117

#118

#120

#122

#124

#126

#127

#128

#129

#13

#130

#133

#134

#137

#138

#14

#142

#143

#145

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#163

#165

#166

#168

#169

#17

#170

#171

#174

#175

#176

#177

#178

#18

#180

#181

#182

#183

#184

#185

#189

#19

#190

#191

#192

#194

#196

#197

#198

#199

#200

#207

#208

#209

#21

#210

#211

#212

#213

#216

#22

#221

#222

#223

#225

#226

#227

#228

#229

#23

#231

#233

#234

#235

#236

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#25

#251

#252

#252

#253

#254

#254

#255

#256

#258

#259

#26

#261

#262

#263

#270

#272

#273

#276

#277

#278

#279

#281

#283

#285

#286

#287

#289

#290

#291

#292

#293

#294

#295

#296

#298

#299

#303

#304

#308

#31

#311

#312

#313

#314

#316

#318

#320

#321

#323

#324

#325

#327

#328

#33

#331

#334

#336

#338

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#36

#360

#361

#362

#364

#365

#366

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#38

#380

#381

#382

#383

#385

#386

#387

#388

#389

#39

#390

#390

#391

#391

#394

#40

#41

#43

#45

#5

#50

#52

#53

#54

#56

#57

#58

#59

#6

#60

#62

#63

#64

#67

#68

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#87

#90

#93

#94

#95

#96

#97

#98

#99

v0.0.1

v0.0.10

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.0.7

v0.0.8

v0.0.9

v0.1.0

v0.10.0

v0.10.1

v0.11.0

v0.12.0

v0.12.1

v0.13.0

v0.14.0

v0.15.0

v0.16.0

v0.17.0

v0.17.1

v0.17.2

v0.17.3

v0.17.4

v0.18.0

v0.18.1

v0.18.2

v0.19.0

v0.19.1

v0.2.0

v0.2.1

v0.20.0

v0.21.0

v0.21.1

v0.21.2

v0.21.3

v0.22.0

v0.22.1

v0.23.0

v0.24.0

v0.24.1

v0.24.2

v0.25.0

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

v1

Mono Color

• a814bf648e docs: correct the container CA instructions, they did not work ebpf-poc Sahilb315 2026-07-28 23:05:31 +05:30
• 0deb8fa4ff docs: container traffic reaches the proxy via the bridge address Sahilb315 2026-07-28 22:47:31 +05:30
• 20ea125002 docs(ebpf-poc): fix setup guide errors found by walking it Sahilb315 2026-07-28 20:47:30 +05:30
• 9b29a95e03 feat(ebpf-poc): trust the CA machine wide instead of configuring npm Sahilb315 2026-07-28 19:46:46 +05:30
• e9ce5a27f2 docs(ebpf-poc): require build-essential in setup Sahilb315 2026-07-28 17:53:28 +05:30
• 472a3e859a docs(ebpf-poc): setup guide and CA trust findings Sahilb315 2026-07-28 17:47:58 +05:30
• d987512ccf feat(ebpf-poc): manage the proxy CA and npm trust Sahilb315 2026-07-28 17:47:47 +05:30
• 60f2565145 feat(ebpf-poc): derive proxy target and exemption from state Sahilb315 2026-07-27 21:17:47 +05:30
• 8430aea21c Merge branch 'main' into fix/handle-safe-sandbox-violation-rendering fix/handle-safe-sandbox-violation-rendering Abhisek DattaandGitHub 2026-07-27 17:43:21 +05:30
• d9240eed82 fix(container): cut image vulnerabilities with x dep bumps and base image refresh (#394) main v0.25.0 Sahil BansalandGitHub 2026-07-27 17:42:51 +05:30
• 93b8abf390 docs(design): record the interception implementation steps Sahilb315 2026-07-27 14:18:55 +05:30
• a4b99e40e7 feat(ebpf-poc): redirect eligible connections to the proxy Sahilb315 2026-07-27 14:18:47 +05:30
• 05a484ea5e implement decision logic Sahilb315 2026-07-27 13:51:09 +05:30
• 70e2d34a48 docs(design): Linux network enforcement via eBPF Sahilb315 2026-07-27 12:32:26 +05:30
• 82ddbc70af feat(proxy): accept transparent redirected connections Sahilb315 2026-07-27 12:31:24 +05:30
• a23717890d fix: Safe rendering of sandbox violation messages abhisek 2026-07-25 18:34:09 +05:30
• 47dd859756 feat(sandbox): report landlock seccomp denials via pmg sandbox violations (#389) Sahil BansalandGitHub 2026-07-25 18:08:27 +05:30
• b8e12c27ae fix main.go Sahilb315 2026-07-24 22:54:20 +05:30
• da6e10d2ad add protocol field Sahilb315 2026-07-24 22:40:35 +05:30
• 3e1ece3257 visibility setup with ebpf Sahilb315 2026-07-24 21:23:23 +05:30
• 77cf263ca0 build: pin gRPC to v1.81.0 deps/#201-update-go-1.26 Sahilb315 2026-07-23 23:35:47 +05:30
• e8ae270286 build: update to Go 1.26 Sahilb315 2026-07-22 16:10:14 +05:30
• 94781d6bda Remove guard mode: proxy interception is now the only flow (#386) Sahil BansalandGitHub 2026-07-22 15:19:19 +05:30
• 3031665ac7 fix(cloud): actionable errors when sync credentials are missing or rejected (#388) Sahil BansalandGitHub 2026-07-21 16:02:04 +05:30
• ee684a29a9 feat(sandbox): presets — additive workload allowance bundles (#387) 3 people 2026-07-21 15:14:07 +05:30
• 695a1d739d feat: Add support for sandbox edit command (#385) 3 people 2026-07-18 22:53:39 +05:30
• bafd3c0654 Update README to include GHCR installation detail (#383) Sahil BansalandGitHub 2026-07-16 18:08:29 +05:30
• 6cd8851679 fix(container): cross-compile per target platform so linux/arm64 ships an arm64 binary (#382) v0.24.2 3 people 2026-07-16 17:21:54 +05:30
• d6709e2fd7 feat(audit): record cloud events without credentials via EventEmitterClient (#381) v0.24.1 3 people 2026-07-16 15:54:27 +05:30
• 1cc1520d71 feat(cloud): support plaintext file credential store on systems without an OS keychain feat/cloud-login-insecure-file-store Sahilb315 2026-07-15 21:53:55 +05:30
• 46803f8e70 fix(doctor): stop npm protection passing when the real package manager is absent (#378) v0.24.0 Sahil BansalandGitHub 2026-07-15 09:11:52 +05:30
• dc0e3202cc feat: Linux system-wide setup (pmg setup install --system) (#377) 5 people 2026-07-14 21:34:22 +05:30
• 4d65a2c5f0 fix: stop reowning /etc/profile.d; document group-writable and su gaps cursor/linux-system-install Sahilb315 2026-07-14 14:58:13 +05:30
• f251a073e3 fix: reject system binaries unreachable by other users; consistent info Sahilb315 2026-07-14 14:06:17 +05:30
• 748d40c14f fix: harden system dirs at install; keep sudo attribution without passwd Sahilb315 2026-07-14 13:24:08 +05:30
• 4b2a25a378 fix: gate SUDO_USER trust and root path diversion; add doctor binary check Sahilb315 2026-07-14 13:07:27 +05:30
• 297f516242 fix: fall back to env path resolution when root has no passwd entry Sahilb315 2026-07-14 04:49:07 +05:30
• ad16d8c162 fix: adapt event-log error to the two-value remedy signature Sahilb315 2026-07-14 04:13:36 +05:30
• e0580b1f79 ci: pin XDG_CONFIG_HOME for the cross-user e2e step; terse doctor fix Sahilb315 2026-07-14 04:12:27 +05:30
• cd9b45b3bc fix: triage the unwritable config dir remedy by cause Sahilb315 2026-07-14 03:56:07 +05:30
• de0fa41852 fix: resolve per-user paths from root's own home when running as root Sahilb315 2026-07-14 03:24:01 +05:30
• 479f546ebc fix: actionable remedy for root-created per-user config dir Sahilb315 2026-07-14 02:40:08 +05:30
• 1b17eb295a ci: normalize /usr/local/bin perms before system-install e2e Sahilb315 2026-07-14 01:14:10 +05:30
• 1276a1ebaa fix: address system-install review findings Sahilb315 2026-07-14 00:44:44 +05:30
• b1aa217011 fix: harden doctor PATH checks and attribute cloud events by OS user Sahilb315andCursor 2026-07-13 23:12:02 +05:30
• 1c9b16f1fa fix: harden system-install review findings Sahilb315andCursor 2026-07-13 22:20:57 +05:30
• 0d0399f665 chore: revert packageManager pin to pnpm 11.1.3 Sahilb315andCursor 2026-07-13 17:41:24 +05:30
• 37eed636c8 ci: use npm init for pnpm e2e to avoid integrity crash Sahilb315andCursor 2026-07-13 17:37:04 +05:30
• 2b53abbe4a chore: bump packageManager to pnpm 11.10.0 for e2e Sahilb315andCursor 2026-07-13 17:31:50 +05:30
• 5d710a78d1 ci: add Linux system-install e2e and pin pnpm for add flake Sahilb315andCursor 2026-07-13 17:02:11 +05:30
• fdd1aea1ed fix: tighten event-log soft-fail warning prefix Sahilb315andCursor 2026-07-13 15:40:52 +05:30
• 8d1a4b60e1 fix: clarify system-install doctor alias and shim path checks Sahilb315andCursor 2026-07-13 15:37:02 +05:30
• ffd0e7e759 fix: harden and simplify Linux system install Sahilb315andCursor 2026-07-11 02:11:42 +05:30
• 7922606644 chore: keep local design documents untracked Sahilb315andCursor 2026-07-10 23:34:55 +05:30
• 8f6d0fcce0 feat: add Linux system-wide setup Sahilb315andCursor 2026-07-10 23:33:52 +05:30
• d3e656edcd feat(sandbox): enable network_via_proxy_only for the Go ecosystem profile (#375) v0.23.0 Abhisek DattaandGitHub 2026-07-10 23:10:35 +05:30
• 5e0670266e test(sandbox): darwin end-to-end lockdown enforcement test (#374) Abhisek DattaandGitHub 2026-07-10 23:01:36 +05:30
• ed614812f5 feat(sandbox): actionable violation message for lockdown network denials (#373) Abhisek DattaandGitHub 2026-07-10 22:01:10 +05:30
• 3ac83a436d feat(sandbox): Seatbelt lockdown translation — deny-all outbound, allow loopback proxy port (#372) 3 people 2026-07-10 21:11:56 +05:30
• 5131c3f641 feat(sandbox): ExecutionContext plumbing and fail-closed lockdown contract (#371) 3 people 2026-07-10 20:12:33 +05:30
• 22d6eabb6b feat(sandbox): add network_via_proxy_only and allow_direct_dns policy fields (#370) 3 people 2026-07-10 19:28:39 +05:30
• e6b5157a2a ci: add macOS test job (#366) 3 people 2026-07-10 19:07:15 +05:30
• 31e51b10dd refactor: move proxy block message rendering to presentation layer (#364) Sahil BansalandGitHub 2026-07-10 17:42:26 +05:30
• 2f1c348a06 fix(cloud): surface real backend errors from pmg cloud sync (#365) 3 people 2026-07-10 15:19:09 +05:30
• 2d938ea381 feat: advisory message appended to block output (#362) Sahil BansalandGitHub 2026-07-09 17:49:00 +05:30
• c601e17cdc fix: Sandbox profile for Go ecosystem (#361) v0.22.1 Abhisek DattaandGitHub 2026-07-06 23:38:38 +05:30
• 02965143d0 fix: fail fast when package manager is not installed (#360) v0.22.0 3 people 2026-07-06 18:31:18 +05:30
• b19473945b Add experimental Go module proxy support (#358) 3 people 2026-07-03 18:19:31 +05:30
• 648adcbda4 feat: add uvx (uv tool run) package executor (#357) 3 people 2026-07-02 18:49:31 +05:30
• 0fb6faa951 add runner hostname to CI invocation context (#356) v0.21.3 Sahil BansalandGitHub 2026-07-01 17:23:59 +05:30
• f9ca26d112 Add Trendshift badge to README (#355) Kunal SinghandGitHub 2026-06-30 13:25:10 +05:30
• 2a7ecdb556 ci: add E2E for pmg action server-mode (#354) Sahil BansalandGitHub 2026-06-26 16:33:37 +05:30
• 7b13b6bfb3 docs: Update README GHA example (#353) v0.21.2 Abhisek DattaandGitHub 2026-06-26 15:17:14 +05:30
• 5ac0f275b8 feat(proxy): emit session summary on persistent proxy shutdown (#352) v1 v0.21.1 Sahil BansalandGitHub 2026-06-26 14:47:53 +05:30
• c47776db27 feat(proxy): persistent proxy server mode (#351) v0.21.0 3 people 2026-06-26 11:19:28 +05:30
• 7ee4187d50 refactor: Event log use audit event as SSOT (#350) Abhisek DattaandGitHub 2026-06-24 15:43:20 +05:30
• ea1d697728 add composite action test case - 3 feat/persistent-proxy Sahilb315 2026-06-24 13:20:47 +05:30
• 81cbd900fa add composite action test case - 2 Sahilb315 2026-06-24 13:18:02 +05:30
• 368e54c5bc add composite action test case Sahilb315 2026-06-24 13:14:24 +05:30
• 0920a955a1 add pip fail case with unsupported package manager prefix Sahilb315 2026-06-24 13:07:44 +05:30
• 7cf5592312 add pip fail case Sahilb315 2026-06-24 13:04:34 +05:30
• 25dd12d7a4 test: Add proxy e2e test (#348) v0.20.0 Abhisek DattaandGitHub 2026-06-23 22:21:57 +05:30
• 12570a802c fix(proxy-e2e): let pmg proxy stop fail the job when packages are blocked Sahilb315 2026-06-23 17:11:49 +05:30
• ea2c7e8242 feat(proxy): report blocked packages on stop, exit 1 if any were blocked Sahilb315 2026-06-23 17:07:07 +05:30
• e19aa274f1 update workflow Sahilb315 2026-06-23 15:47:34 +05:30
• 39debb474d feat(proxy): add persistent proxy server with start/stop/env/status commands Sahilb315 2026-06-23 15:36:41 +05:30
• 5bd756e3fb refactor(flows): extract SetupCACertificate to shared function Sahilb315 2026-06-23 14:31:11 +05:30
• 0697b38b68 feat(proxystate): add state file package for persistent proxy Sahilb315 2026-06-23 14:24:19 +05:30
• d360e75897 feat: Add malysis cache implementation with proxy flow integration (#346) Abhisek DattaandGitHub 2026-06-22 10:12:02 +05:30
• 327c9c7068 feat(cooldown): respect trusted_packages in dependency cooldown (#342) 3 people 2026-06-21 18:22:15 +05:30
• c17b941ac3 fix: expand ${CWD}/${HOME}/${TMPDIR} in --sandbox-allow path overrides (#344) 3 people 2026-06-17 23:47:33 -07:00
• 55f3f2a252 fix: Decouple cloud sync from telemetry (#343) Abhisek DattaandGitHub 2026-06-17 16:03:26 +05:30
• baf637be97 feat(analyzer): analysis cache contract (MalysisCache interface + config) (#334) dmdhrumilmistryandGitHub 2026-06-17 15:07:47 +05:30
• 61230fbcd7 feat(cooldown): add dependency_cooldown.skip list (per-control exemption) (#328) 3 people 2026-06-15 19:44:55 +05:30
• eb56c5768f docs: add E2E test refactoring spec claude/e2e-tests-github-actions-hkxij2 Claude 2026-06-15 10:55:07 +00:00
• 26d5c0ad71 test(e2e): verify proxy-mode NO_PROXY does not crash Python httpx (#341) v0.19.1 Abhisek DattaandGitHub 2026-06-15 15:40:02 +05:30
• 6d82b95e78 fix: use bare ::1 in NO_PROXY to avoid crashing Python httpx (#340) 3 people 2026-06-15 15:29:00 +05:30
• 9a02e8de87 Respect explicitly set CI environment variable (#336) v0.19.0 3 people 2026-06-13 09:56:43 +05:30
• 788a031003 Fix glob parent directory allowance for patterns with glob characters (#331) 3 people 2026-06-12 12:11:12 +05:30
• c7244f921a feat: Add support for environment protection (scrubbing) (#327) Abhisek DattaandGitHub 2026-06-11 11:40:33 +05:30