fix: harden OCI Bearer authentication against SSRF and credential forwarding - #1276

Open

Kaniska (Kaniska244) wants to merge 6 commits into

devcontainers:mainfrom

Kaniska244:security-issue-analysis

Commits on Aug 11, 2026

fix: Security findings
Kaniska (Kaniska244)
committed
b19c8c5
Should not fetch an OCI manifest for a legacy single-label Feature ID
Kaniska (Kaniska244)
committed
dd0a924
Add a matrix job for the new test script
Kaniska (Kaniska244)
committed
4bee03d
Merge branch 'main' into security-issue-analysis
Kaniska (Kaniska244)
authored
e988fe9
Potential fix for pull request finding

Kaniska (Kaniska244)
and
Copilot
authored
78d116e
Implemented review comment to catch error for the token request with no redirect.
Kaniska (Kaniska244)
committed
109b1e6