Pulse

mirror of https://github.com/rcourtman/Pulse.git synced 2026-02-18 23:41:48 +01:00

Files

rcourtman dc4669f9f6 security: harden agent installers and auto-update mechanism

Install script (scripts/install.sh):
- Add multi-platform support: Unraid, OpenRC/Alpine, Synology DSM 6/7
- Add input validation for URL, token format, and interval
- Add binary magic verification (ELF/Mach-O/PE)
- Add cleanup trap for temp files
- Wrap script in main() for partial download protection
- Fix shellcheck compliance issues
- Add curl timeouts

Agent auto-update (agentupdate, dockeragent):
- Enforce TLS 1.2 minimum version
- Make SHA256 checksum verification mandatory
- Add 100MB binary size limit
- Add binary magic verification before replacement
- Add Unraid persistent binary update after self-update
- Add 5-minute download timeout

Frontend:
- Update Linux install description to note auto-detection of init systems

2025-11-26 13:14:58 +00:00

agent_integration_test.go

chore: snapshot current changes

2025-11-02 22:47:55 +00:00

agent_internal_test.go

Refactor: Code cleanup and localStorage consolidation

2025-11-04 21:50:46 +00:00

agent_log_test.go

Improve agent update logging and installer warnings (related to #737 )

2025-11-23 22:07:37 +00:00

agent.go

security: harden agent installers and auto-update mechanism