내부 builder 인증과 실행 허용 목록 및 자원 경계를 적용한다

This commit is contained in:
2026-10-09 04:31:44 +09:00
parent 6d05c01a76
commit f78ab77850
13 changed files with 979 additions and 205 deletions
+1 -1
View File
@@ -10,7 +10,7 @@ COPY --chmod=755 runtime/entrypoint.sh /usr/local/bin/sammo-entrypoint
COPY --chmod=755 runtime/redis-entrypoint.sh /opt/sammo/redis-entrypoint.sh
COPY --chmod=755 runtime/git-askpass.sh /opt/sammo/git-askpass.sh
COPY --chmod=755 runtime/checkout-active-release.sh /opt/sammo/checkout-active-release.sh
COPY runtime/ecosystem.config.cjs runtime/bootstrap.mjs runtime/validate-env.mjs runtime/release-builder.mjs runtime/release-builder-client.mjs /opt/sammo/
COPY runtime/ecosystem.config.cjs runtime/bootstrap.mjs runtime/validate-env.mjs runtime/release-builder.mjs runtime/release-builder-security.mjs runtime/release-builder-client.mjs /opt/sammo/
WORKDIR /srv/core/repository
ENTRYPOINT ["/usr/bin/tini", "--", "/usr/local/bin/sammo-entrypoint"]