7 commits

Author	SHA1	Message	Date
Miguel Jacq	44d1a22db4	hardlinked source files are refused, remote schema URLs require an explicit flag, generated harvest artifacts use the hardened bundle writer, and task/handler/playbook YAML writes go through one safety gate.	2026-06-28 18:17:45 +10:00
Miguel Jacq	f5b85d29d3	Better protection against symlink traversal in flatpak. Other hardening	2026-06-28 17:03:24 +10:00
Miguel Jacq	07b07e60c5	Ensure paths are not followed through parent links	2026-06-22 15:32:40 +10:00
Miguel Jacq	eb1d096c90	Add support for detecting flatpaks and snaps	2026-06-14 18:25:26 +10:00
Miguel Jacq	4cdc78915f	Changes that make ansible-lint happy. nosec on the subprocess commands	2025-12-15 11:29:08 +11:00
Miguel Jacq	227be6dd51	Many tweaks	2025-12-15 11:04:54 +11:00
Miguel Jacq	5398ad123c	Initial commit	2025-12-14 20:53:22 +11:00