Skip to content

Agent Countercheck v0.5.3

Choose a tag to compare

@github-actions github-actions released this 21 Oct 02:02
· 94 commits to PROD since this release
Immutable release. Only release title and notes can be modified.
  • Fix: on macOS and Linux, processes a check leaves running in the background are stopped when the check ends.
    A check that started a server or sleep 300 & and exited could pass while that process kept running (and kept
    its port open) after verify finished, beyond the check's timeout. Each check already ran in its own process
    group, but the group was only killed on timeout; now it is killed after every check, as Windows already did with
    its Job Object. Reported by Perch Scan. A process that deliberately leaves the group (setsid) can still escape
    on Unix; the macOS sandbox and a container remain the way to contain a hostile check.

Install

You use Command
Python pip install -U agent-countercheck · uvx --from agent-countercheck countercheck verify
macOS / Linux, Homebrew brew trust --formula datacrate360/tap/agent-countercheck && brew upgrade agent-countercheck
macOS / Linux, any shell curl -fsSL https://raw.githubusercontent.com/datacrate360/agent-countercheck/PROD/install.sh | sh
Windows 10/11, PowerShell irm https://raw.githubusercontent.com/datacrate360/agent-countercheck/PROD/install.ps1 | iex