jpmschweitzer/odysseus
1
0
Fork 0
mirror of https://github.com/pewdiepie-archdaemon/odysseus.git synced 2026-10-25 00:02:25 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(security): refresh client trust and publish validated SearXNG images

Browse Source 
Repair SearXNG system and certifi stores, validate native amd64/arm64 runtime images through Compose, and publish the exact verified artifacts through a trusted CI job. Adopt released Python, certifi, grpcio, uv and Docker CLI trust fixes, with strict controls for all fourteen public incident chains.

Part of #6784 and #6790.

Co-authored-by: Léo <leograndcontact@gmail.com>
This commit is contained in:
RaresKeY
2026-10-23 22:32:33 +00:00
co-authored by Léo
parent f8e043e8ca
commit c6d76b9a9b
23 changed files with 1200 additions and 17 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docker/searxng/compose.yml
+9
View File
@@ -0,0 +1,9 @@
# Opt in to the locally built trust-corrected image without publishing a tag.
# Run from the repository root with the base Compose file first.
services:
searxng:
image: localhost/odysseus-searxng:2026.9.25-ca-trust
build:
context: .
dockerfile: docker/searxng/Dockerfile
target: runtime