tensorchord / envd

42%

main: 42%

LAST BUILD ON BRANCH fix/python-packages-context-escape

branch: fix/python-packages-context-escape

CHANGE BRANCH

x

Reset

• fix/python-packages-context-escape
• bump_deps_go1.24
• bump_docker
• bump_langs_tools
• bump_tool_version
• bump_toto
• change_default_cache
• chore/bump-deps-cooldown
• codex
• codex_template
• codex_template_rm_rust
• context_test
• dependabot/github_actions/all-actions-33f85eacb2
• dependabot/github_actions/all-actions-3d5feb921a
• dependabot/github_actions/all-actions-5a16e2f7b6
• dependabot/github_actions/all-actions-943132e926
• dependabot/github_actions/all-actions-99f7258382
• dependabot/github_actions/all-actions-afd9e15987
• dependabot/github_actions/all-actions-b2d0bad867
• dependabot/github_actions/all-actions-b48345356d
• dependabot/github_actions/all-actions-f6cb9b2958
• dependabot/github_actions/golangci/golangci-lint-action-7
• dependabot/github_actions/pypa/cibuildwheel-2.22.0
• dependabot/go_modules/all-dependencies-364f6f349b
• dependabot/go_modules/all-dependencies-369a70ab72
• dependabot/go_modules/all-dependencies-6347dcef1b
• dependabot/go_modules/all-dependencies-716b900955
• dependabot/go_modules/all-dependencies-9d0b856a24
• dependabot/go_modules/all-dependencies-cf168d5ded
• dependabot/go_modules/github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream-1.7.8
• dependabot/go_modules/github.com/charmbracelet/bubbletea-1.3.0
• dependabot/go_modules/github.com/charmbracelet/bubbletea-1.3.3
• dependabot/go_modules/github.com/charmbracelet/bubbletea-1.3.4
• dependabot/go_modules/github.com/charmbracelet/lipgloss-1.0.0
• dependabot/go_modules/github.com/cockroachdb/errors-1.11.3
• dependabot/go_modules/github.com/containerd/containerd/v2-2.0.4
• dependabot/go_modules/github.com/containerd/containerd/v2-2.1.5
• dependabot/go_modules/github.com/containerd/containerd/v2-2.2.4
• dependabot/go_modules/github.com/containerd/containerd/v2-2.3.6
• dependabot/go_modules/github.com/docker/cli-27.5.1incompatible
• dependabot/go_modules/github.com/docker/cli-28.0.4incompatible
• dependabot/go_modules/github.com/docker/docker-27.5.0-rc.2incompatible
• dependabot/go_modules/github.com/docker/docker-27.5.1incompatible
• dependabot/go_modules/github.com/docker/docker-28.0.4incompatible
• dependabot/go_modules/github.com/docker/docker-28.3.3incompatible
• dependabot/go_modules/github.com/go-git/go-billy/v5-5.9.0
• dependabot/go_modules/github.com/go-jose/go-jose/v4-4.1.4
• dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.3.0
• dependabot/go_modules/github.com/go-viper/mapstructure/v2-2.4.0
• dependabot/go_modules/github.com/hashicorp/go-getter-1.7.7
• dependabot/go_modules/github.com/hashicorp/go-getter-1.7.8
• dependabot/go_modules/github.com/hashicorp/go-getter-1.7.9
• dependabot/go_modules/github.com/hashicorp/go-getter-1.8.6
• dependabot/go_modules/github.com/in-toto/in-toto-golang-0.11.0
• dependabot/go_modules/github.com/moby/term-0.5.2
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.0
• dependabot/go_modules/github.com/onsi/ginkgo/v2-2.23.3
• dependabot/go_modules/github.com/pkg/sftp-1.13.9
• dependabot/go_modules/github.com/syncthing/syncthing-1.29.2
• dependabot/go_modules/github.com/syncthing/syncthing-1.29.3
• dependabot/go_modules/github.com/ulikunitz/xz-0.5.14
• dependabot/go_modules/go.opentelemetry.io/otel-1.41.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.40.0
• dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0
• dependabot/go_modules/golang.org/x/crypto-0.45.0
• dependabot/go_modules/golang.org/x/crypto-0.52.0
• dependabot/go_modules/golang.org/x/net-0.38.0
• dependabot/go_modules/golang.org/x/net-0.55.0
• dependabot/go_modules/google.golang.org/grpc-1.79.3
• dependabot/go_modules/google.golang.org/grpc-1.82.1
• docs_codex
• embed_templates
• envd_template
• fish4.0.1
• fix_blog_link
• fix_cmd_alias
• fix_gh2083
• fix_git_cve
• get_latest_github_release_tag
• gh-readonly-queue/main/pr-1416-15f62ccb0c2798c6d007261f790a9a08af8c3002
• gh-readonly-queue/main/pr-1495-9a4cad69d460a1bee4cf4f6056e670a8f121931c
• gh-readonly-queue/main/pr-1531-7be38d8f5681b0347e8163428e3c1f7503541b36
• gh-readonly-queue/main/pr-1538-176637b7e68081045937a30101e022bda9a2e74d
• gh-readonly-queue/main/pr-1546-948a83c5747b062ece310922c577b291e6ff21e6
• gh-readonly-queue/main/pr-1548-1f547f9d7c907557e7f257fa17bf50e39fdce603
• gh-readonly-queue/main/pr-1554-dd4816746720a813755f59b72e281c2cdc5ce59b
• gh-readonly-queue/main/pr-1562-c0010cc59de11a4a188bbfccd31d3e8f4ff65892
• gh-readonly-queue/main/pr-1564-bc0eaf86034cd174afa362ecf904c7ea13aec9b6
• gh-readonly-queue/main/pr-1566-f3acdff65d68e9315a0575e0d41c3354fb2562bc
• gh-readonly-queue/main/pr-1568-ac0dd7eb0516651bbc175e42870ccdecad86ab93
• gh-readonly-queue/main/pr-1569-e56981a47ecd1e4f8a7684e1cea6b1720476084f
• gh-readonly-queue/main/pr-1577-599f00164d821f2b3caac5909d623d504c6d8ca4
• gh-readonly-queue/main/pr-1579-6d2b37477929aaadb5a36d7a9d329ce6443b2758
• gh-readonly-queue/main/pr-1581-d4e58366802efc444c9e0986d42f3836871abe8a
• gh-readonly-queue/main/pr-1582-2839aa33bf097b440064aad9a1aaba461647db50
• gh-readonly-queue/main/pr-1582-2fbb4475c7da55dc4fc23e25dfb6f6c8666f63cf
• gh-readonly-queue/main/pr-1582-fd45847e4ebec79bf644d291fa4d2420ea032373
• gh-readonly-queue/main/pr-1583-528d083af56ed26e6105d8474feb0a206f83c9c0
• gh-readonly-queue/main/pr-1587-9673a1fdff7b38cc3f230931e6138eddbc38a5af
• gh-readonly-queue/main/pr-1589-7089bda5d8fb6d5d994777b4e83b3f3a96b62b09
• gh-readonly-queue/main/pr-1593-0700488320abbaf4a142a93c2f497bf2915d6da7
• gh-readonly-queue/main/pr-1593-4306ddf8b490b546f7292df5605a866c63110686
• gh-readonly-queue/main/pr-1593-4f731b9a6ebfa2fb105c34dadd88f053c9e8cbb6
• gh-readonly-queue/main/pr-1593-d109a280ff9c67f64cf8275dd712ae2c471c6994
• gh-readonly-queue/main/pr-1593-e5972b27eb700af06b739f17d0fcbbaa659f0798
• gh-readonly-queue/main/pr-1593-e9c1cb9efe743a241c8c7436402e866c76d73d53
• gh-readonly-queue/main/pr-1594-aaaa93137b40893215f24fe6795064deea95cc23
• gh-readonly-queue/main/pr-1595-8ab73d8a7faa9b9fa4a0f882ae904683e2867868
• gh-readonly-queue/main/pr-1621-c7dc7f945e096c54a1b30b23e197fed94ad6eda7
• gh-readonly-queue/main/pr-1622-fa5e457a785b95e5453be51fa5bf01c780f21bfd
• gh-readonly-queue/main/pr-1623-5e5503d3ae9efbb6cbab2ee2376e55ee3411f702
• gh-readonly-queue/main/pr-1624-886c1f5c5299251f6fb218df291a676bdade502b
• gh-readonly-queue/main/pr-1626-637b1f2447dc21155b5038ea7001658f5db064ed
• gh-readonly-queue/main/pr-1627-2f37763851fc918707589be335758348eb95dd0b
• gh-readonly-queue/main/pr-1639-1af61d3777c5c19652643411c87c068831899e01
• gh-readonly-queue/main/pr-1650-dc2781cd02feef07434895cb7a4f5cd78831adbf
• gh-readonly-queue/main/pr-1653-56406e980f63acfe27e17738f9eab4a24b1e5565
• gh-readonly-queue/main/pr-1656-1143cbf2fdd110819f9a4027c7f450b08f3fa01f
• gh-readonly-queue/main/pr-1658-45dffe79097b92f59a61391df72f54e15475bb16
• gh-readonly-queue/main/pr-1672-9bac2c0b2f3ad9bd87806de3226bc5b4faf8ce68
• gh-readonly-queue/main/pr-1673-73794012482324ed8a909118869631e8401e78f6
• gh-readonly-queue/main/pr-1679-1e218267f18c07833acdf86f9cee70ed832a0472
• gh-readonly-queue/main/pr-1680-5383e01882204da67a68eff856110807b31130f5
• gh-readonly-queue/main/pr-1699-a817e6aadb5362eb424e75f135a750ff418862f7
• gh-readonly-queue/main/pr-1722-ddc3009c2bd7739bd1bfd6ac4b1c02892daacbe4
• gh-readonly-queue/main/pr-1738-7441e3863e99282d06e3da2f7159caf651ea3217
• gh-readonly-queue/main/pr-1741-73842809565ac5207aa1badb03d6ad9f17583ab1
• gh-readonly-queue/main/pr-1743-a4fe97a2cd00ab77484019c759c48b50f398324e
• gh-readonly-queue/main/pr-1746-1aa4a8ff8380d19ac723374cf280259d7a0adc2b
• gh-readonly-queue/main/pr-1761-bffc025da8725e2eab060d079bce2777c6987388
• gh-readonly-queue/main/pr-1799-5328b3af89ece85b7cde9bd10886feeb9aa1c46d
• gh-readonly-queue/main/pr-1811-ff60292972c1ae580b054c0ce1a5e4a1a0ac0d07
• gh-readonly-queue/main/pr-1821-158d5db7783e79c03b1430c94633b322f3ec7d7b
• gh-readonly-queue/main/pr-1828-6f40b668b4d4f720b3b9d46b40bc5ff923c96675
• gh-readonly-queue/main/pr-1831-7b49cc3748d6579acfeffdd8a92e03b1291582ee
• gh-readonly-queue/main/pr-1831-df243803ca52f9eda7e62bcc01135a82f4b2194e
• gh-readonly-queue/main/pr-1839-24c36729e7d4f3618be916f1da9d03ec7f14fa01
• gh-readonly-queue/main/pr-1845-639c188536181c1d621bd45d04b2243fef72c467
• gh-readonly-queue/main/pr-1849-73e4671bd592877b51e3ea4b6efd185fc368c348
• gh-readonly-queue/main/pr-1849-95ae9db9bef7f236c40b74d04539215e4731b7af
• gh-readonly-queue/main/pr-1853-c3df9cb742e1bd7737acc0839449c9e1aa13bed4
• gh-readonly-queue/main/pr-1863-b8dfa15c3771da14ec781825c3dc0eb0d2339feb
• gh-readonly-queue/main/pr-1864-dfa017b74889de8a30c2327ee07d6bf591f13aa5
• gh-readonly-queue/main/pr-1902-50740076e4f74c076329be6ccdf937f395fae07c
• gh-readonly-queue/main/pr-1939-6d0c0c8eb645df758b4104ffe37ec4cc2a09cea9
• gh-readonly-queue/main/pr-1961-3b1d272c583350b00aaa1f5b599cec171d35732f
• gh-readonly-queue/main/pr-1970-ab9be8045170afa4e44d75dc49ca48e8dce4f897
• gh-readonly-queue/main/pr-1971-b53e06d4943c149594dfe1da52043febb51686c5
• gh-readonly-queue/main/pr-1975-2b3a8d184acaaf286c56ada79cd2e3c5bd646c6c
• gh-readonly-queue/main/pr-1990-797fa19d2554355d4f8cb4e37dcf2e68d134ee33
• gh-readonly-queue/main/pr-1991-1089f98474ca85f453c90366acecf9f6a505aad0
• gh-readonly-queue/main/pr-1992-207c30ee9556bb6915996166507fbc81ec26309a
• gh-readonly-queue/main/pr-1995-bdac0934353dd7ce98bc7838172e1c7cae1e213e
• gh-readonly-queue/main/pr-1996-a78a2454ca633ad403b12920ef71a534f8b819d5
• gh-readonly-queue/main/pr-2010-2506ede9f274403e66360029f98f6bd12faac243
• gh-readonly-queue/main/pr-2012-8514a4aee1bc96c9677995cedc0cc93e20063670
• gh-readonly-queue/main/pr-2016-a1a315e8e901fb5c04d52d4c8c0b59fe4da12be5
• gh-readonly-queue/main/pr-2020-30284ff3d7d81e0c5fd628590dde28d04537ced9
• gh-readonly-queue/main/pr-2022-2af2a92464fc5d6ec72a81b5863dfd214d8fddbe
• gh-readonly-queue/main/pr-2026-af96cb339e4a90e21debba7363e74963b2b8507a
• gh-readonly-queue/main/pr-2027-61bc8ddaca9343f5b61840a21b44c8960cfcf26d
• gh-readonly-queue/main/pr-2030-826deb00abdd458a7f1ddc04874534f783cded09
• gh-readonly-queue/main/pr-2031-81ec976c1bda3c9362a29994f7d106e5df413970
• gh-readonly-queue/main/pr-2032-d571d1bca05c4f64507ea36538313719ec8fc247
• gh-readonly-queue/main/pr-2033-b06fa662b23323232f0cfc92847ec332d17e426f
• gh-readonly-queue/main/pr-2034-9dd2299ccef5ffab15c44792675efd65f9795488
• gh-readonly-queue/main/pr-2035-ae895b1263089231c7c433d490f095e623b4c332
• gh-readonly-queue/main/pr-2038-9ac5ce83fb25c404fa7b60c954959d0ac28bbd65
• gh-readonly-queue/main/pr-2042-d3cfbb56ff34962694e0e917fadc82f87088df12
• gh-readonly-queue/main/pr-2052-e23061d4c64faf5f5c0687723dfc361de2a60031
• gh-readonly-queue/main/pr-2053-8d1e4bb28d3ed48f538fb2ba14c765ff9127397e
• gh-readonly-queue/main/pr-2069-5338ee68876e5134c2143ac4a48b8cfddd6ba42b
• gh-readonly-queue/main/pr-2071-4719fa2998d4ea8a57c8c12b8d1abeaf8eca0cad
• gh-readonly-queue/main/pr-2073-eb76188c9362f02f5c03e4377cbc2a46801a1578
• gh-readonly-queue/main/pr-2087-6471107ea252b13a5a6a3d8aa3c41ce6427ebdd3
• gh-readonly-queue/main/pr-2089-0b8622574c79186146f845cc9f8baa570e48777e
• gh-readonly-queue/main/pr-2091-e4110d278bdf02c2fd924b7f9de3df84db7afe9b
• gh-readonly-queue/main/pr-2096-fe0d820e1d0a5c1fbe0ca2cb600636daa2ca0e7f
• gh-readonly-queue/main/pr-2098-46aaab1ec8082f578c4725bb78f986f21bd7a623
• gh-readonly-queue/main/pr-2114-376d0713fdc27abe63e23af59f047169fb51ecc6
• gh-readonly-queue/main/pr-2114-9e2d2cd34173a150c642138630087d18132b2311
• golangci_lint_v2
• gpu_cache
• install_go
• julia_v1
• lang_rust
• locale
• main
• mamba2
• mamba_ownership
• moby_context
• monthly_dep_bot
• nodejs
• pin_action
• pixi
• pixi_template
• python311
• remove_v0
• rlang_v1
• ruff_lychee
• run
• ssh_agent_forward_err
• sshd_err
• sshd_from_ghcr
• starship_ghcr
• tablewriter
• ubuntu2204
• up_cap
• upstream_horust
• use_docker_export_cache
• uv

Build # 36320185237

Build Type

Pull #2112

github

Committed by kemingy

Commit Message

fix: restrict install.python_packages paths to the build context

The requirements file and local wheels accepted arbitrary paths. The
requirements file was read on the host without any containment check,
so a path like ../../etc/passwd escaped the build context and its
content leaked into build logs and image metadata.

- frontend: resolve paths against the build context (thread-local),
  reject paths escaping it (absolute, .., symlinks), and normalize to
  a context-relative path for reuse inside the container
- compile: verify the symlink-resolved requirements file stays inside
  the build context before reading it on the host, which also covers
  graphs reloaded from image labels

Signed-off-by: Keming <kemingy94@gmail.com>

Pull Request Pull Request #2112: fix: restrict install.python_packages paths to the build context

Coverage Stats

49 of 66 new or added lines in 4 files covered. (74.24%)

23 existing lines in 14 files now uncovered.

4820 of 11432 relevant lines covered (42.16%)

137.44 hits per line