feat: remove MCP servers
Remove all four MCP server packages from the Dockerfile along with their associated env vars (docker-compose.yml, .env.example) and egress allowlist entries (squid.conf). Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
parent
eb5f240d3e
commit
a9ff78b494
4 changed files with 0 additions and 47 deletions
|
|
@ -30,28 +30,6 @@ COPY settings.json /etc/claude-code/managed-settings.json
|
|||
RUN curl -fsSL https://claude.ai/install.sh | bash -s stable
|
||||
|
||||
|
||||
# Install MCP servers globally — entry points land in /usr/local/lib/node_modules/
|
||||
RUN npm install -g \
|
||||
@modelcontextprotocol/server-github \
|
||||
@yoda.digital/gitlab-mcp-server \
|
||||
@aashari/mcp-server-atlassian-jira \
|
||||
@aashari/mcp-server-atlassian-confluence
|
||||
|
||||
# Patch transitive CVEs bundled inside MCP server node_modules:
|
||||
# CVE-2025-66414, CVE-2026-0621 — @modelcontextprotocol/sdk <1.25.2
|
||||
# CVE-2026-33671 — picomatch <4.0.4
|
||||
RUN for pkg_dir in \
|
||||
/usr/local/lib/node_modules/@modelcontextprotocol/server-github \
|
||||
/usr/local/lib/node_modules/@yoda.digital/gitlab-mcp-server \
|
||||
/usr/local/lib/node_modules/@aashari/mcp-server-atlassian-jira \
|
||||
/usr/local/lib/node_modules/@aashari/mcp-server-atlassian-confluence; do \
|
||||
[ -d "$pkg_dir" ] && \
|
||||
cd "$pkg_dir" && \
|
||||
npm install --no-audit --no-fund \
|
||||
@modelcontextprotocol/sdk@1.25.2 \
|
||||
picomatch@4.0.4 \
|
||||
|| true; \
|
||||
done
|
||||
|
||||
# Workspace and Claude config dir — owned by the built-in node user (uid 1000).
|
||||
# Pre-creating ~/.claude ensures the named volume is initialised with the
|
||||
|
|
|
|||
Loading…
Add table
Add a link
Reference in a new issue