Skip to content

feat: sudo fix + meta API - #490

Merged
rohan-stepsecurity merged 4 commits into
mainfrom
rp/cherry/main
Aug 27, 2026
Merged

feat: sudo fix + meta API#490
rohan-stepsecurity merged 4 commits into
mainfrom
rp/cherry/main

Conversation

@rohan-stepsecurity

Copy link
Copy Markdown
Member

No description provided.

Call disableSudoAndContainers early in agent startup and revoke sudo and
socket permissions before the slow container cleanup, which now runs in
the background. Add tests for revocation order and socket perms.
(cherry picked from commit aa706cd)
Fetch GitHub Actions endpoints from the GitHub meta API and add them to
the implicit endpoint list, with retries on failure. Skip domains under
githubusercontent.com because existing wildcard implicit endpoints
already cover them. If the fetch fails, the hardcoded implicit endpoints
remain as the baseline.
(cherry picked from commit 5391cf1)
Move runCmd and path overrides onto Sudo so the background
container-cleanup goroutine never reads package state restored by tests.
(cherry picked from commit bae4f1c)
@rohan-stepsecurity
rohan-stepsecurity merged commit a7ab843 into mainAug 27, 2026
5 checks passed
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants

@rohan-stepsecurity@h0x0er