Dorian 7bbb9cc5cd fix: Phase 3 — command injection, unwrap/expect panics, unsigned image acceptance ...

- VPN key gen: replaced sh -c with format string (command injection) with
  safe stdin piping to wg pubkey
- Secrets manager: replaced .unwrap() on path.parent() with proper error
- Tor proxy: replaced .expect("valid proxy") with continue on error
- Image verifier: added require_signatures flag, strict mode rejects
  unsigned images and missing cosign binary

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-18 00:45:15 +00:00

..

src

fix: Phase 3 — command injection, unwrap/expect panics, unsigned image acceptance

2026-03-18 00:45:15 +00:00

Cargo.toml

refactor: update dependencies and remove unused code

2026-03-12 00:19:30 +00:00