Commit Graph - pmg - Gitea: Git with a cup of tea

External/pmg

Fork 0

mirror of https://github.com/safedep/pmg.git synced 2026-08-03 07:24:09 +02:00

Commit Graph

Select branches

Hide Pull Requests

KunalSin9h-patch-1

ci/add-security-actions

claude/debug-issue-193-XaViY

claude/debug-npm-proxy-issue-B2ceu

claude/e2e-tests-github-actions-hkxij2

claude/fix-localhost-proxy-routing-g8vcQ

claude/pmg-env-var-protection-qkpe6k

cursor/fix-bwrap-in-project-venv

cursor/linux-system-install

deps/#201-update-go-1.26

docs/add-pip-support

docs/readme-update

ebpf-poc

feat/#27-pip-support

feat/#7-manifest-files-scan

feat/32-error-messages

feat/add-support-for-active-scanning

feat/cloud-login-insecure-file-store

feat/dep-cooldown

feat/goreleaser

feat/npm-support

feat/persistent-config

feat/persistent-proxy

feat/pnpm-support

feat/proxy-install-only

feat/proxy-malysis-interceptor

fix/#16-npm-arg-parsing

fix/deps-fetch-progress-bar

fix/handle-safe-sandbox-violation-rendering

fix/image

fix/issue-10

fix/issue-3-and-4

fix/linux-sandbox-driver-probe-landlock-access

fix/manifest-file-deps-resolution

fix/misc-fixes

fix/sandbox-shai-hulud-ttp-conformance

fix/ux-improvements

issue-9-add-colorful-outputs

main

refactor/abhisek-20250512

refactor/community-api-support

sandbox-fix

skip-sandbox-e2e-for-linux

test-npm

update-readme

#1

#100

#101

#102

#104

#105

#106

#107

#108

#11

#111

#112

#113

#116

#117

#118

#120

#122

#124

#126

#127

#128

#129

#13

#130

#133

#134

#137

#138

#14

#142

#143

#145

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#163

#165

#166

#168

#169

#17

#170

#171

#174

#175

#176

#177

#178

#18

#180

#181

#182

#183

#184

#185

#189

#19

#190

#191

#192

#194

#196

#197

#198

#199

#200

#207

#208

#209

#21

#210

#211

#212

#213

#216

#22

#221

#222

#223

#225

#226

#227

#228

#229

#23

#231

#233

#234

#235

#236

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#25

#251

#252

#252

#253

#254

#254

#255

#256

#258

#259

#26

#261

#262

#263

#270

#272

#273

#276

#277

#278

#279

#281

#283

#285

#286

#287

#289

#290

#291

#292

#293

#294

#295

#296

#298

#299

#303

#304

#308

#31

#311

#312

#313

#314

#316

#318

#320

#321

#323

#324

#325

#327

#328

#33

#331

#334

#336

#338

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#350

#351

#352

#353

#354

#355

#356

#357

#358

#36

#360

#361

#362

#364

#365

#366

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#38

#380

#381

#382

#383

#385

#386

#387

#388

#389

#39

#390

#390

#391

#391

#394

#40

#41

#43

#45

#5

#50

#52

#53

#54

#56

#57

#58

#59

#6

#60

#62

#63

#64

#67

#68

#70

#71

#72

#73

#74

#75

#76

#77

#78

#79

#8

#80

#81

#82

#83

#87

#90

#93

#94

#95

#96

#97

#98

#99

v0.0.1

v0.0.10

v0.0.2

v0.0.3

v0.0.4

v0.0.5

v0.0.6

v0.0.7

v0.0.8

v0.0.9

v0.1.0

v0.10.0

v0.10.1

v0.11.0

v0.12.0

v0.12.1

v0.13.0

v0.14.0

v0.15.0

v0.16.0

v0.17.0

v0.17.1

v0.17.2

v0.17.3

v0.17.4

v0.18.0

v0.18.1

v0.18.2

v0.19.0

v0.19.1

v0.2.0

v0.2.1

v0.20.0

v0.21.0

v0.21.1

v0.21.2

v0.21.3

v0.22.0

v0.22.1

v0.23.0

v0.24.0

v0.24.1

v0.24.2

v0.25.0

v0.3.0

v0.3.1

v0.3.2

v0.3.3

v0.3.4

v0.3.5

v0.3.6

v0.3.7

v0.3.8

v0.4.0

v0.4.1

v0.4.2

v0.4.3

v0.4.4

v0.4.5

v0.4.6

v0.5.0

v0.6.0

v0.7.0

v0.8.0

v0.9.0

v1

7620097613 feat : adds pipx support to PMG (#292)
Divyanshu GitHub Abhisek Datta Sahil Bansal
2026-06-10 16:26:33 +05:30
ab1a5386d3 fix: Malysis analyzer should fallback to Community Mode when API Credentials are Incorrect (#325) Abhisek DattaandGitHub 2026-06-10 13:42:09 +05:30
d60a558579 feat(sandbox): scrub sensitive environment variables from package managers claude/pmg-env-var-protection-qkpe6k Claude 2026-06-10 07:17:14 +00:00
9714a6f4c2 fix(pty): treat background jobs as non-interactive to avoid SIGTTOU stop (#324) v0.18.2
Abhisek Datta GitHub Claude
2026-06-10 09:57:08 +05:30
374f9f315e docs: cover CLI overrides and project overlays in env protection spec Claude 2026-06-10 02:10:52 +00:00
8a00d63856 docs: explicit known-secret deny list, wildcards via profile only Claude 2026-06-10 01:35:06 +00:00
be2908db29 docs: spec for process-level environment variable protection Claude 2026-06-10 01:27:27 +00:00
141894ed8f fix(shim): recognize shims at arbitrary paths via PMG_SHIM_PATH (#323) Sahil BansalandGitHub 2026-06-09 20:33:14 +05:30
872c5d663c fix(sandbox): bind parent dir for globstar allow_write on bwrap (#321) v0.18.1 Sahil BansalandGitHub 2026-06-07 10:03:23 +05:30
e2e740dd76 fix(sandbox): bind parent dir for globstar allow_write on bwrap cursor/fix-bwrap-in-project-venv Sahilb315 2026-06-06 18:09:50 +05:30
f3e00a7f6e fix: yarn proxy mode proxy environment injection (#320) v0.18.0 Abhisek DattaandGitHub 2026-06-05 18:39:37 +05:30
4f0db15ede feat: Add opt-in support for proxy CA cert installation (#318) Abhisek DattaandGitHub 2026-06-03 23:15:02 +05:30
c3f3920d2e fix(proxy): harden MITM proxy reliability and scale for bulk installs (#314)
Abhisek Datta GitHub Claude
2026-06-02 21:41:57 +05:30
0f084931c6 docs: add safe-chain to comparison table (#316) Sahil BansalandGitHub 2026-06-01 17:28:25 +05:30
f6e1d9e733 feat: authenticated Malysis analyzer with tenant exclusion support (#313)
Abhisek Datta GitHub Claude
2026-06-01 15:32:22 +05:30
5018f8e2ff fix: Suppress non-PMG error from Critical UI Error (#311) v0.17.4
Abhisek Datta GitHub Sahil Bansal
2026-05-29 20:19:53 +05:30
db1a5e58b3 fix: bump ptyx to fix debug log staircasing in raw mode (#312) Sahil BansalandGitHub 2026-05-29 20:04:28 +05:30
6087bc922f feat: populate CI invocation context on cloud events (#304) v0.17.3
Sahil Bansal GitHub Claude Opus 4.6
2026-05-28 19:12:12 +05:30
4540dafccc fix: Handle platform specific PTY polling for terminal copy (#279) Abhisek DattaandGitHub 2026-05-28 18:11:11 +05:30
1c25395d74 feat: migrate pmg to nx based release automation (#293) v0.17.2 Arunanshu BiswasandGitHub 2026-05-28 17:22:11 +05:30
19b9f2ca1f fix: avoid resolving symlinks in shim PMG binary path (#303) v0.17.1 Sahil BansalandGitHub 2026-05-27 16:00:43 +05:30
37958f4441 docs: mark Socket as supporting no account or API key (#299)
Abhisek Datta GitHub Claude
2026-05-27 12:12:11 +05:30
a651761636 docs: Update README (#296)
Abhisek Datta GitHub Copilot Autofix powered by AI Sahil Bansal
2026-05-26 22:15:14 +05:30
b03e82e3f2 feat: Add support for per-project sandbox overlays (#294) v0.17.0 Abhisek DattaandGitHub 2026-05-26 21:06:57 +05:30
321896996f fix: skip PyPI dependency cooldown for clients without PEP 691 support (#295) Sahil BansalandGitHub 2026-05-26 20:50:10 +05:30
083f82dd79 feat: Add pmg setup doctor command (#290) Sahil BansalandGitHub 2026-05-26 12:21:39 +05:30
8cb7b7d1c0 fix: npm Dependency Cooldown Select Stable Version (#291) Abhisek DattaandGitHub 2026-05-25 14:38:39 +05:30
dc3f3e6618 Promote gofrs/flock to direct dependency (#281)
Divyanshu GitHub Abhisek Datta
2026-05-25 07:46:48 +05:30
88d8a566bc ci: pin codeql-action to commit SHA for Node 24 support (#289) DivyanshuandGitHub 2026-05-25 07:39:19 +05:30
ffb4e6dd1a chore: Update DRY to fix stable endpoint identity in CI/CD (#287) Abhisek DattaandGitHub 2026-05-24 15:06:35 +05:30
219d743b80 chore: Standardise Error Codes (#286) Abhisek DattaandGitHub 2026-05-24 12:46:06 +05:30
20e01d5cae refactor : Refactor error handling to use dry/usefulerror (#283)
Divyanshu GitHub Abhisek Datta
2026-05-24 12:22:19 +05:30
e5fe0df82e fix: Avoid posthog telemetry noise on stderr (#285) Abhisek DattaandGitHub 2026-05-24 11:24:49 +05:30
b59c3358e8 fix(sandbox): classify helper-tool errors with usefulerror (#272)
Abhisek Datta GitHub Claude
2026-05-21 19:34:29 +05:30
0e3bb52f8c fix: Opt-in lockdown for global config (#278) v0.16.0 Abhisek DattaandGitHub 2026-05-21 16:37:26 +05:30
b15ce33fe4 fix: MacOS MDM based Deployment (#277) Abhisek DattaandGitHub 2026-05-21 14:32:30 +05:30
875cda2e43 add macOS uninstall script (#276)
Sahil Bansal GitHub Abhisek Datta
2026-05-21 11:49:28 +05:30
9b0e12f130 feat: Add Support for Optimistic Cloud Sync (#273) v0.15.0 Abhisek DattaandGitHub 2026-05-20 13:56:50 +05:30
5872f5281f docs: refresh README for clarity and conversion (#270) Abhisek DattaandGitHub 2026-05-19 15:18:03 +05:30
b8588e3df4 feat: Add Sandbox Inspection and Debugging Commands (#261) Abhisek DattaandGitHub 2026-05-19 14:40:54 +05:30
46cc70db53 feat: add GitHub Action for one-step PMG setup in CI (#263) v0.14.0
Abhisek Datta GitHub Claude
2026-05-18 00:44:06 +05:30
c78287e5a0 feat: add pmg config get/set/edit CLI commands (#262) Sahil BansalandGitHub 2026-05-16 09:55:54 +05:30
4de9f84c0c feat: add macOS setup script for Jamf deployment (#258) v0.13.0 Sahil BansalandGitHub 2026-05-13 21:19:43 +05:30
6249d0781d feat(install): add support for clean installation (#259) Diego Ramil ÁlvarezandGitHub 2026-05-13 17:22:41 +02:00
3848cc78e0 refactor: Maintain single code path for package manager execution (#256) Abhisek DattaandGitHub 2026-05-13 19:14:00 +05:30
e185067eff fix: Update sandbox conformance test fix/sandbox-shai-hulud-ttp-conformance Abhisek Datta 2026-05-13 15:40:12 +05:30
511a6d1c58 fix: filter pmg shim directory from child process environment (#255) Sahil BansalandGitHub 2026-05-13 07:53:07 +05:30
b18cc577f8 test: Add test case for simulating shai-hulud ttp Abhisek Datta 2026-05-12 22:27:34 +05:30
6546116e28 feat: migrate PMG to use PATH shims for package manager wrapper (#246)
Sahil Bansal GitHub Abhisek Datta
2026-05-12 22:27:05 +05:30
d993d57e3d feat: Add support for sandbox diagnostic log (#245) Abhisek DattaandGitHub 2026-05-12 18:11:18 +05:30
81c161dba3 fix: Landlock probe environment and autofallback to BW fix/linux-sandbox-driver-probe-landlock-access abhisek 2026-05-11 21:29:11 +05:30
00fd6d2a9c fix: Handle bubblewrap deny write with read overlay (#251) v0.12.1 Abhisek DattaandGitHub 2026-05-11 16:12:06 +05:30
a31c201117 chore: Add a landlock test for path deny (#247) Abhisek DattaandGitHub 2026-05-08 19:48:57 +05:30
19d735cdd2 feat: emit cloud events for dependency cooldown and host observations (#243) v0.12.0
Sahil Bansal GitHub Claude Opus 4.6devin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>Abhisek Dattadevin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-05-08 10:01:25 +05:30
b671192598 fix: Allow macos fsevents by default in sandbox (#244) Abhisek DattaandGitHub 2026-05-07 18:02:38 +05:30
4c42ceca0e feat: Add support for Landlock based Sandbox for Linux (#238) Abhisek DattaandGitHub 2026-05-07 12:42:28 +05:30
5122a1594c fix: remove script runners from NonDownloadCommands lists (#242) v0.11.0 Sahil BansalandGitHub 2026-05-06 21:13:03 +05:30
d8abfb6c41 fix: flatten proxy skip_commands schema and move docs to proxy-mode.md (#241) Sahil BansalandGitHub 2026-05-06 19:26:39 +05:30
d1dd2560a4 feat: consolidate proxy config into structured section and add support for custom commands to skip proxy (#240) Sahil BansalandGitHub 2026-05-06 18:27:23 +05:30
d6755d3f44 feat/sandbox allow explicit dangerous pattern override (#239)
Abhisek Datta GitHub Claude Opus 4.7
2026-05-06 12:45:36 +05:30
b56a8e2a43 chore: Show cloud credentials store in setup info (#236) v0.10.1 Abhisek DattaandGitHub 2026-05-04 21:54:49 +05:30
8b94b860a7 chore: Add install.sh based installation option (#234) Abhisek DattaandGitHub 2026-05-04 21:46:58 +05:30
27551d5019 feat: Add pmg setup edit command (#235) Abhisek DattaandGitHub 2026-05-04 21:38:29 +05:30
e269a2f175 build: add Windows support for Makefile (#233) Kanak WaradkarandGitHub 2026-05-04 20:57:33 +05:30
296d5e52e1 chore: Update GHA actions to Node.js 24 (#231) Sahil BansalandGitHub 2026-04-30 07:52:44 +05:30
1d9045d770 fix: Enforce sandbox for update commands that may download packages (#220) (#229) v0.10.0
Sahil Bansal GitHub Abhisek Datta
2026-04-28 17:49:58 +05:30
1a983c1dc1 feat: Log PMG version and config details in debug mode (#228) Sahil BansalandGitHub 2026-04-28 17:44:38 +05:30
6099571411 update npm registry readme (#227) Sudhanshu DasguptaandGitHub 2026-04-23 18:35:03 +05:30
c3a3518c36 feat: Show cooldown report for pinned version installs (#225) v0.9.0 Sahil BansalandGitHub 2026-04-23 17:47:14 +05:30
996d9aeca0 Add config support for disabling telemetry (#226) v0.8.0
Sahil Bansal GitHubdevin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>devin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-04-22 22:04:56 +05:30
544b38b278 feat: Add PyPI dependency cooldown support (#221) v0.7.0 Sahil BansalandGitHub 2026-04-20 21:10:05 +05:30
365deb1897 feat: Add proxy_install_only config to restrict proxy to download commands (#222)
Sahil Bansal GitHub Claude
2026-04-17 01:13:30 +05:30
b3de46da03 update npm test cmd feat/proxy-install-only Sahilb315 2026-04-16 19:20:22 +05:30
4de9bdbb20 docs: Document environment variable overrides for config keys Sahilb315 2026-04-15 20:38:03 +05:30
bb9342cf6d fix: Restore trusted_packages template entry and revert DefaultConfig change Sahilb315 2026-04-15 20:17:50 +05:30
f117627e3c refactor: Replace reflection-based Viper defaults with embedded template Sahilb315 2026-04-15 20:06:53 +05:30
7821c40312 fix: Only check first non-flag arg against NonDownloadCommands Sahilb315 2026-04-15 02:11:24 +05:30
95b1df30d3 fix: Support PMG_* env vars regardless of config file state Sahilb315 2026-04-15 01:16:05 +05:30
e11890167e refactor: Invert proxy_install_only logic to use known non-download commands Sahilb315 2026-04-14 23:33:58 +05:30
1089d4b3cd refactor: Inject CommandExecutor into guard to fix dependency direction Sahilb315 2026-04-14 20:34:33 +05:30
da098a51a8 feat: Add proxy_install_only config to restrict proxy to download commands Sahilb315 2026-04-10 23:29:09 +05:30
887984612c feat: Add Cloud Endpoint Sync Commands (#216) Abhisek DattaandGitHub 2026-04-13 13:40:18 +05:30
e67735c1c3 feat: Add cloud sync event emit (#212)
Abhisek Datta GitHubdevin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>devin-ai-integration[bot] <158243242+devin-ai-integration[bot]@users.noreply.github.com>
2026-04-11 12:33:27 +05:30
0355a5d4fd feat: Add audit system with sink based dispatcher (#211) Abhisek DattaandGitHub 2026-04-10 19:07:15 +05:30
e72ff6aeaf perf: Serialize concurrent certificate generation (#210) v0.6.0 Abhisek DattaandGitHub 2026-04-08 23:30:46 +05:30
a128a60982 docs: Add dependency cooldown docs (#209)
Abhisek Datta GitHub Sahil Bansal
2026-04-08 22:49:30 +05:30
dbe968dec6 fix: only strip own package manager name in ParseCommand args (#208) Sahil BansalandGitHub 2026-04-08 22:27:45 +05:30
987bda5d6a feat: Add dependency cooldown for npm packages (#200)
Sahil Bansal GitHub Abhisek Datta
2026-04-08 21:04:17 +05:30
64b95b3ad0 docs: README Update (#199) Abhisek DattaandGitHub 2026-04-07 00:56:21 +05:30
115531f6b3 perf: Use circuit breaker to fail open Malysis query requests (#196) Abhisek DattaandGitHub 2026-04-03 21:39:00 +05:30
ad379de2f3 add dependencies cooldown feat/dep-cooldown Sahilb315 2026-04-03 21:25:50 +05:30
c7c4fc462f chore: tune proxy config (#197) Abhisek DattaandGitHub 2026-04-03 16:36:12 +05:30
635e40cc1f fix: Bypass proxy for loopback addresses to prevent localhost connection failures (#194) v0.5.0
Sahil Bansal GitHub Claude Opus 4.6
2026-04-01 19:28:25 +05:30
baf06fd5f1 Remove issue URL reference from reproducer script claude/debug-issue-193-XaViY Claude 2026-04-01 12:51:33 +00:00
605ef1651f Add reproducer script for issue #193 (loopback proxy interference) Claude 2026-04-01 12:47:22 +00:00
f62ae124e9 fix: set NO_PROXY to exclude loopback from proxy routing (issue #193) claude/fix-localhost-proxy-routing-g8vcQ Claude 2026-04-01 09:19:12 +00:00
5fdc3a03ae update README.md & workflows (#192)
Sahil Bansal GitHub Claude Opus 4.6
2026-03-31 19:54:25 +05:30
d112ded3da feat: Merge template config into existing user config during setup install (#189)
Sahil Bansal GitHub Claude Opus 4.6
2026-03-31 19:21:01 +05:30
be4b751091 fix: Use PowerShell Expand-Archive for zip extraction on Windows (#190)
Sahil Bansal GitHub Claude Opus 4.6
2026-03-31 15:05:37 +05:30
7cf8d7ecfa update copy text update-readme Sahilb315 2026-03-31 14:47:34 +05:30

1 2 3 4 5 ...