Skip to content

Harden installer and temporary storage paths - #3593

Merged
Widthdom merged 7 commits into
mainfrom
codex/fix-issue3378-3411-3499-3503-3511-rebased
Jun 12, 2026
Merged

Harden installer and temporary storage paths#3593
Widthdom merged 7 commits into
mainfrom
codex/fix-issue3378-3411-3499-3503-3511-rebased

Conversation

@Widthdom

Copy link
Copy Markdown
Owner

Summary

  • Resolve trusted installer shell execution through absolute bash paths.
  • Move sensitive upgrade/export/import dry-run/update/log temp/cache paths into private directories or private file modes.
  • Harden install.sh uninstall cache purge, rollback cleanup, and install directory validation.

Validation

  • dotnet build -p:UseSharedCompilation=false
  • dotnet test tests/CodeIndex.Tests/CodeIndex.Tests.csproj --filter "FullyQualifiedName~ProgramRunnerTests|FullyQualifiedName~DataDirectorySecurityTests|FullyQualifiedName~ExportImportCommandRunnerTests|FullyQualifiedName~GlobalToolLogTests|FullyQualifiedName~InstallScriptTests" -p:UseSharedCompilation=false
  • dotnet run --project tools/CodeIndex.Changelog -- check
  • git diff --check origin/main..HEAD
  • dotnet ./src/CodeIndex/bin/Debug/net8.0/cdidx.dll status --check --json

Review

Fixes #3378
Fixes #3411
Fixes #3499
Fixes #3503
Fixes #3511

@Widthdom
Widthdom marked this pull request as ready for review June 12, 2026 03:18
@Widthdom
Widthdom merged commit d8087a8 into main Jun 12, 2026
10 checks passed
@Widthdom
Widthdom deleted the codex/fix-issue3378-3411-3499-3503-3511-rebased branch June 14, 2026 14:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment