v0.1.1 — Security & Polish
tinycode-container v0.1.1
Security hardening and documentation improvements.
Security
- JSON injection prevention for TINYCODE_VLLM_MODEL (input validation)
- Git credential sanitization in entrypoint logs
- oc CLI checksum verification after download
- GPG-verified RPM downloads for tmux/libutempter
- GitHub Actions pinned to SHA digests
- NetworkPolicy for ingress restriction
- Read-only root filesystem support
- Ingress rate limiting annotations
Fixed
- Install URL fixed (was returning 404)
- Port corrected to 4096 in install.sh
- Stale "private repositories" language updated
- Tmux description corrected (RPM, not compiled from source)
- License section clarified
Added
- CONTRIBUTING.md, SECURITY.md, CODE_OF_CONDUCT.md, CHANGELOG.md
- CI/License/Release badges
- Issue/PR templates, Dependabot
- Complete environment variable documentation in CONTAINER.md