mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
Abhisek DattaandGitHub
c7244f921a
* feat: Add support for environment variable protection for sandbox * chore: Update dangerous env var list * fix: Split profiles for improved environment protection * fix: pipx sandbox profile separation * chore: Show sandbox scrub info on error exit * fix: Code review fixes * test: Add e2e for sandbox environment scrubbing
55 lines
1.6 KiB
YAML
55 lines
1.6 KiB
YAML
name: pipx
|
|
description: Profile for pipx executor with write access to current directory
|
|
inherits: pypi-restrictive
|
|
|
|
package_managers:
|
|
- pipx
|
|
|
|
# pipx requires PTY access to work, especially for commands like:
|
|
# pipx run cowsay hello
|
|
#
|
|
# Explicitly setting this so that it is enabled even if we decide to turn this off
|
|
# in parent profiles in the future.
|
|
allow_pty: true
|
|
|
|
# pipx-executed tools may need to bind to localhost ports (e.g., dev servers)
|
|
allow_network_bind: true
|
|
|
|
environment:
|
|
# The pypi-restrictive base allows no environment variables. pipx delegates
|
|
# to pip inside its venvs, so it needs the pip config namespace for index
|
|
# auth and TLS. Sibling tool credentials (UV_PUBLISH_TOKEN, POETRY_*) and
|
|
# TWINE_* stay scrubbed.
|
|
allow:
|
|
- PIP_*
|
|
|
|
filesystem:
|
|
allow_read:
|
|
# pipx venv homes: ~/.local/pipx is the legacy default. pipx >= 1.5
|
|
# defaults PIPX_HOME to platformdirs locations when the legacy dir does
|
|
# not exist: ~/.local/share/pipx on Linux, ~/Library/Application Support/pipx
|
|
# on macOS.
|
|
- ${HOME}/.local/pipx/**
|
|
- ${HOME}/.local/share/pipx/**
|
|
- ${HOME}/Library/Application Support/pipx/**
|
|
- ${HOME}/.local/bin/**
|
|
|
|
# pipx run caches ephemeral venvs here
|
|
- ${HOME}/.cache/pipx/**
|
|
- ${HOME}/Library/Caches/pipx/**
|
|
|
|
# Add write permissions for pipx-specific paths
|
|
allow_write:
|
|
- ${CWD}/**
|
|
- ${HOME}/.local/pipx/**
|
|
- ${HOME}/.local/share/pipx/**
|
|
- ${HOME}/Library/Application Support/pipx/**
|
|
- ${HOME}/.local/bin/**
|
|
- ${HOME}/.cache/pipx/**
|
|
- ${HOME}/Library/Caches/pipx/**
|
|
|
|
# Additional deny rules for extra security
|
|
deny_write:
|
|
- ${CWD}/.env
|
|
- ${CWD}/.env.*
|