php-devops/scripts
unknown 991bb45d44
security: address remaining vulnerabilities from security review
install-core.ps1:
- Add Test-SecureDirectory and New-SecureDirectory to mitigate TOCTOU races
- Add Test-GitTagSignature for GPG verification of git tags
- Make ACL failures fatal for temp directories with retry logic
- Use precise PATH matching instead of substring contains
- Add unique GUID suffix to temp file names
- Document security controls and known limitations in header

setup.bat:
- Validate LOCALAPPDATA is within USERPROFILE
- Reject paths with invalid shell characters
- Add symlink detection for install directory
- Use delayed expansion variables for path safety

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 00:29:32 +11:00
..
install-core.ps1 security: address remaining vulnerabilities from security review 2026-02-01 00:29:32 +11:00
install-core.sh feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00
install-deps.ps1 feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00
install-deps.sh feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00