admin/trailofbits-claude-code-devcontainer
1
0
Fork 0
mirror of https://github.com/trailofbits/claude-code-devcontainer synced 2026-06-21 14:11:48 +00:00
Code Issues Packages Projects Releases Wiki Activity
24 Commits 3 Branches 0 Tags
codex-support
Commit Graph

8 Commits

Author SHA1 Message Date
Emilio López 386f44ef79 Update Docker image versions 2026-05-27 16:27:11 -03:00
Emilio López fdb44ca7a3 Add Codex support to devcontainer 2026-05-27 16:05:15 -03:00
dm 48df2ad80d feat: add Renovate config to keep Dockerfile updated (#38) 
Add renovate.json with a custom regex manager that picks up
`# renovate:` comment directives on ARG lines. This covers:
- Docker base images (handled natively by Renovate's dockerfile manager)
- git-delta, fzf, and zsh-in-docker versions via github-releases

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-04-09 13:23:28 +02:00
Ehren Bendler 40ca54d410 Update versions in Dockerfile (#34) 2026-03-23 09:18:56 +01:00
Jay Little c7ec556ae6 add marketplace skills-curated (#23) 
Added 'trailofbits/skills-curated' plugin to Claude Code installation.
 2026-02-13 11:52:19 -05:00
Dan Guido a1f3994cda Harden devcontainer: pin digests, guard SYS_ADMIN, fix mount filters (#20) 
Address review feedback from #14–#19:

- Pin base image and uv with SHA256 digests (#15)
- Install fzf from GitHub releases instead of apt (#14)
- Add SYS_ADMIN capability guard to prevent remount attacks (#16)
- Fix mount filter to use target paths instead of source prefixes (#17)
- Fix temp file leak in extract_mounts_to_file (#17)
- Sort apt packages alphabetically (#18)
- Remove unused Tailscale feature (#19)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-02-10 06:35:35 -05:00
Dan Guido 369b395361 Add bubblewrap and socat for Claude Code sandboxing (#9) 
These packages are required for Claude Code's native sandboxing on Linux:
- bubblewrap: Provides filesystem isolation via Linux namespaces
- socat: Enables the network proxy for domain filtering

Without these, the /sandbox command shows installation instructions
instead of enabling sandbox mode.

Ref: https://code.claude.com/docs/en/sandboxing

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-30 19:19:14 -05:00
Dan Guido 91ff6f7c0c Initial commit 2026-01-29 20:13:16 -05:00