Commit graph

  • 94333e4d32 fix(dockerfile): purge npm cache in same layer as installs to prevent secret leakage main docker-claude 2026-04-20 23:32:26 +02:00
  • e8d134f5a9 fix(dockerfile): bump MCP SDK 1.26.0, patch brace-expansion 5.0.5 (GHSA-345p-7cg4-v4c7, GHSA-f886-m6hf-6m8v) docker-claude 2026-04-20 23:23:27 +02:00
  • 71494a59b3 ci(scan): add Grype scanning alongside Trivy; fix --vuln-type flag docker-claude 2026-04-20 22:45:48 +02:00
  • b741b02408 fix(dockerfile): scrub npm auth tokens written during image build docker-claude 2026-04-20 16:37:00 +02:00
  • 12d75b0dc2 fix(docker): patch picomatch 4.0.3 → 4.0.4 (CVE-2026-33671) docker-claude 2026-04-20 16:05:05 +02:00
  • a79aad9fc8 fix(security): remove MCP credentials from managed-settings.json; bump Trivy to 0.70.0 docker-claude 2026-04-20 16:00:37 +02:00
  • 9b931bcfd7 temporarily remove mcp servers docker-claude 2026-04-20 15:54:15 +02:00
  • 526ff6dc2e Revert "feat: remove MCP servers" docker-claude 2026-04-20 15:32:29 +02:00
  • a9ff78b494 feat: remove MCP servers docker-claude 2026-04-20 15:32:05 +02:00
  • eb5f240d3e fix(docker): patch transitive CVEs in MCP server dependencies docker-claude 2026-04-20 15:28:20 +02:00
  • 53325c4fcd stuff docker-claude 2026-04-20 15:17:58 +02:00
  • a566b463a9 docs: update node:20-alpine references to node:24-alpine docker-claude 2026-04-20 15:17:15 +02:00
  • ec329ca616 chore(docker): upgrade base image to node:24-alpine (LTS) docker-claude 2026-04-20 15:16:52 +02:00
  • e056e5c006 chore(docker): pin npm to 11.12.1 docker-claude 2026-04-20 15:15:51 +02:00
  • 19c59a2fb3 fix(docker): upgrade npm to remediate 11 HIGH CVEs in bundled dependencies docker-claude 2026-04-20 15:14:58 +02:00
  • 484e0fecb8 revert(docker): switch back to node:20-alpine base image docker-claude 2026-04-20 14:28:45 +02:00
  • 89a3d3dae5 security: use dhi image for the proxy as well docker-claude 2026-04-16 22:52:33 +02:00
  • edeae9dc4b security: use dhi image for nodejs docker-claude 2026-04-16 22:46:52 +02:00
  • 94dadbbe8e chore(ci): pull trivy from registry mirror docker-claude 2026-04-16 12:04:24 +02:00
  • 4a0f2e90fc fix(ci): replace trivy-action with docker run to fix missing binary docker-claude 2026-04-16 12:03:17 +02:00
  • e6b46087b3 feat(ci): generate SBOMs in scan job and attach attestations on push docker-claude 2026-04-16 11:59:24 +02:00
  • 530def213b feat(ci): add Trivy container security scanning before push docker-claude 2026-04-16 11:53:16 +02:00
  • cf50570733 docs(claude.md): sync with current project state docker-claude 2026-04-16 10:17:49 +02:00
  • 3aff92bd41 chore: replace Docker Desktop references with open-source alternatives docker-claude 2026-04-16 10:16:23 +02:00
  • f68ed674d0 feat: add non-technical user onboarding docker-claude 2026-04-16 10:13:34 +02:00
  • 51e7ab2b08 fix(proxy): close port-6443 allowlist bypass in squid ACLs docker-claude 2026-04-16 10:07:22 +02:00
  • 698b06aafd fix: ash doesn't seem to work with the claude script docker-claude 2026-04-16 09:48:42 +02:00
  • 6e5744b456 fix claude install docker-claude 2026-04-16 09:38:46 +02:00
  • 0fa411a178 docs: updated inline docs docker-claude 2026-04-15 22:43:00 +02:00
  • f4cf8056e9 docs(readme): sync with current state after webui removal docker-claude 2026-04-15 22:41:28 +02:00
  • b76d1e5e2a chore(docker): pin Claude Code install to stable release channel docker-claude 2026-04-15 22:40:01 +02:00
  • 27feedf65e chore(hooks): restore executable bit on hooks/pre-commit docker-claude 2026-04-15 22:02:15 +02:00
  • e78a302cb9 feat: remove webui docker-claude 2026-04-15 21:59:08 +02:00
  • 1dee611fb3 fix repository path docker-claude 2026-04-15 21:39:10 +02:00
  • 8b4f08e68c chore(hooks): fix executable bit on build.sh and hooks/pre-commit docker-claude 2026-04-15 21:19:46 +02:00
  • 2002ea7b32 chore(registry): use docker-public registry path docker-claude 2026-04-15 21:19:33 +02:00
  • 4edef5ac1a fix stuff finally? docker-claude 2026-04-15 19:18:48 +02:00
  • 1b141b200c use new native install docker-claude 2026-04-15 19:18:39 +02:00
  • ab7e909c3c make sure that files are executable docker-claude 2026-04-15 17:55:01 +02:00
  • c328427517 feat(proxy): allow platform.claude.com in egress allowlist docker-claude 2026-04-15 17:53:26 +02:00
  • f07a30bd0b chore(hooks): enforce executable bit on claude.sh and build.sh via pre-commit hook docker-claude 2026-04-15 17:16:58 +02:00
  • 6a060aa8ab fix(workflow): remove build contexts from compose; build.sh uses docker build directly docker-claude 2026-04-15 17:15:51 +02:00
  • 3f91b27c94 refactor(claude.sh): use array for volume args, merge run into start, tighten helpers docker-claude 2026-04-15 17:14:37 +02:00
  • a5af0a5427 ci: also tag builds as latest docker-claude 2026-04-15 17:06:53 +02:00
  • f4a6bc0a99 fix(claude.sh): add --no-build to prevent fallback to local build docker-claude 2026-04-15 17:05:44 +02:00
  • 2d822305d1 refactor(images): pull from registry instead of building; add build.sh for local dev docker-claude 2026-04-15 17:02:43 +02:00
  • ff9ed447c0 update workflow docker-claude 2026-04-15 16:52:40 +02:00
  • 50cfa9da4e fix workflow docker-claude 2026-04-15 16:49:55 +02:00
  • 1dbbbc840d ci: add Forgejo action to build and push Docker images to registry docker-claude 2026-04-15 08:56:25 +02:00
  • 659fb3f339 feat(proxy): allow CONNECT tunnels to Kubernetes API server port 6443 docker-claude 2026-04-15 08:49:11 +02:00
  • 1c01d49f51 feat(claude): install kubectl into container image docker-claude 2026-04-15 08:47:32 +02:00
  • c3c3fcd099 feat(workspace): add --kube flag to mount $HOME/.kube read-only into container docker-claude 2026-04-15 08:45:05 +02:00
  • c3875397b0 feat(security): block user home dirs and SSH/PGP key directories from workspace mount docker-claude 2026-04-15 08:43:09 +02:00
  • 65ac4c7011 feat(security): block mounting home and system directories as workspace docker-claude 2026-04-15 08:40:50 +02:00
  • 3401fa38a5 refactor(workspace): mount CWD as /workspace instead of named volume docker-claude 2026-04-15 08:10:44 +02:00
  • e19d4eb0a3 feat(mcp): add GitHub, GitLab, Jira, and Confluence MCP servers docker-claude 2026-04-14 23:09:42 +02:00
  • c65ed15653 refactor(policy): rename managed-settings.json to settings.json docker-claude 2026-04-14 22:59:25 +02:00
  • 6410f22f1d feat(policy): allow bash and file modification tools without prompting docker-claude 2026-04-14 22:57:29 +02:00
  • 3adc97d901 feat(policy): restrict available models to sonnet, opus, haiku docker-claude 2026-04-14 22:55:02 +02:00
  • 1c489f8636 refactor(claude): use built-in node user instead of custom claude user docker-claude 2026-04-14 22:50:59 +02:00
  • 0800e4a084 fix(claude): use gid/uid 1001 for claude user docker-claude 2026-04-14 22:49:42 +02:00
  • ba3730a24d feat(auth): support subscription login alongside API key docker-claude 2026-04-14 22:47:04 +02:00
  • 88805a3c24 refactor(docker): migrate both images to Alpine docker-claude 2026-04-14 22:40:57 +02:00
  • 782370e014 update permissions docker-claude 2026-04-14 22:26:51 +02:00
  • 9b8562b746 feat(webui): add browser terminal interface via ttyd docker-claude 2026-04-14 22:25:38 +02:00
  • c01102b641 initial Julius Zeidler 2026-04-14 20:11:24 +02:00
  • 0cba6bc8b9 chore(script): set claude.sh as executable master Julius Zeidler 2026-04-14 17:30:39 +02:00
  • 66c74ee396 initial config Julius Zeidler 2026-04-14 17:25:33 +02:00
  • e0e5e03e58 feat(docker): add isolated Claude Code environment with proxy sidecar docker-claude 2026-04-14 17:23:02 +02:00