playground/docker-claude
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(security): remove MCP credentials from managed-settings.json; bump Trivy to 0.70.0
Some checks failed
Build images / check-docker (push) Successful in 1s
Details
Build images / scan (push) Failing after 50s
Details
Build images / build-and-push (push) Has been skipped
Details

Browse source 
settings.json is COPY-ed into the image at build time. Putting MCP server
config with credential env references there risks baking tokens into the
image if placeholders are ever replaced with real values. Move MCP server
config to ~/.claude/settings.json (runtime volume mount) instead.
Managed settings now contains policy only: models, permissions, telemetry.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
docker-claude 2026-04-20 16:00:37 +02:00
parent 9b931bcfd7
commit a79aad9fc8
2 changed files with 1 additions and 32 deletions
Download patch file Download diff file Expand all files Collapse all files

2
.forgejo/workflows/docker-build.yml
View file

@ -10,7 +10,7 @@ env:
# whichever you use to reach it from your desktop/laptop
FORGEJO_HOST: code.zeidler.dev
HELM_EXPERIMENTAL_OCI: 1
TRIVY_IMAGE: registry.zeidler.dev/docker-hub/aquasec/trivy:0.69.3
TRIVY_IMAGE: registry.zeidler.dev/docker-hub/aquasec/trivy:0.70.0
jobs:
check-docker: