php-devops/scripts
unknown c27158066e
security: harden install script against supply chain attacks
- Add SHA256 hash verification for downloaded binaries
- Pin to specific version (v0.1.0) instead of dev tag
- Validate LOCALAPPDATA is within user profile
- Detect symlink attacks on install directory
- Set restrictive ACL (owner-only) on temp build directories
- Validate PATH entries before modification
- Improve error handling with specific exception types

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-02-01 00:20:37 +11:00
..
install-core.ps1 security: harden install script against supply chain attacks 2026-02-01 00:20:37 +11:00
install-core.sh feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00
install-deps.ps1 feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00
install-deps.sh feat: add installation scripts for cross-platform setup 2026-01-28 14:57:30 +00:00