Repository navigation
Agent Countercheck v0.5.3
·
94 commits
to PROD
since this release
Immutable
release. Only release title and notes can be modified.
- Fix: on macOS and Linux, processes a check leaves running in the background are stopped when the check ends.
A check that started a server orsleep 300 &and exited could pass while that process kept running (and kept
its port open) afterverifyfinished, beyond the check's timeout. Each check already ran in its own process
group, but the group was only killed on timeout; now it is killed after every check, as Windows already did with
its Job Object. Reported by Perch Scan. A process that deliberately leaves the group (setsid) can still escape
on Unix; the macOS sandbox and a container remain the way to contain a hostile check.
Install
| You use | Command |
|---|---|
| Python | pip install -U agent-countercheck · uvx --from agent-countercheck countercheck verify |
| macOS / Linux, Homebrew | brew trust --formula datacrate360/tap/agent-countercheck && brew upgrade agent-countercheck |
| macOS / Linux, any shell | curl -fsSL https://raw.githubusercontent.com/datacrate360/agent-countercheck/PROD/install.sh | sh |
| Windows 10/11, PowerShell | irm https://raw.githubusercontent.com/datacrate360/agent-countercheck/PROD/install.ps1 | iex |