Skip to content

v0.1.1 — Security & Polish

Choose a tag to compare

@bobbyjohnstx bobbyjohnstx released this 26 Jun 17:07
· 12 commits to main since this release

tinycode-container v0.1.1

Security hardening and documentation improvements.

Security

  • JSON injection prevention for TINYCODE_VLLM_MODEL (input validation)
  • Git credential sanitization in entrypoint logs
  • oc CLI checksum verification after download
  • GPG-verified RPM downloads for tmux/libutempter
  • GitHub Actions pinned to SHA digests
  • NetworkPolicy for ingress restriction
  • Read-only root filesystem support
  • Ingress rate limiting annotations

Fixed

  • Install URL fixed (was returning 404)
  • Port corrected to 4096 in install.sh
  • Stale "private repositories" language updated
  • Tmux description corrected (RPM, not compiled from source)
  • License section clarified

Added

  • CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md, CHANGELOG.md
  • CI/License/Release badges
  • Issue/PR templates, Dependabot
  • Complete environment variable documentation in CONTAINER.md

Full changelog

v0.1.0...v0.1.1