admin/trailofbits-claude-code-devcontainer
1
0
Fork 0
mirror of https://github.com/trailofbits/claude-code-devcontainer synced 2026-06-21 14:11:48 +00:00
Code Issues Packages Projects Releases Wiki Activity

Address Potential Container Escape via git (#42)

Browse Source 
This patch prevents claude from manipulating `.git/hooks` or
`.git/config` which could result in unintended code execution outside
the devcontainer.

As an example, ask claude to create a git hook to print "Hello World" on
commit or push. Outside of the devcontainer, the git status is clean,
but running `git commit` or `git push` will result in printing "Hellow
World".

Credit for this disovery to @tillberg.
This commit is contained in:
Brad Lhotsky
2026-04-24 10:04:00 -04:00
committed by GitHub
parent 03ea722c4c
commit 5203cb53ba
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
devcontainer.json
+3 -1
View File
@@ -46,7 +46,9 @@
"source=devc-${localWorkspaceFolderBasename}-config-${devcontainerId},target=/home/vscode/.claude,type=volume",
"source=devc-${localWorkspaceFolderBasename}-gh-${devcontainerId},target=/home/vscode/.config/gh,type=volume",
"source=${localEnv:HOME}/.gitconfig,target=/home/vscode/.gitconfig,type=bind,readonly",
"source=${localWorkspaceFolder}/.devcontainer,target=/workspace/.devcontainer,type=bind,readonly"
"source=${localWorkspaceFolder}/.devcontainer,target=/workspace/.devcontainer,type=bind,readonly",
"source=${localWorkspaceFolder}/.git/config,target=/workspace/.git/config,type=bind,readonly",
"source=${localWorkspaceFolder}/.git/hooks,target=/workspace/.git/hooks,type=bind,readonly"
],
"containerEnv": {
"NODE_OPTIONS": "--max-old-space-size=4096",