stsewd
Joined 9 years ago
Karma
445
Submissions
62
Member since
May 2
Python, Neovim, free & open source software. Currently at Read the Docs. https://github.com/stsewd/
View on Hacker NewsRecent submissions
Comment · 5 months ago
Blog post from Codecov https://about.codecov.io/blog/a-new-chapter-for-codecov/
Comment · 5 months ago
I got the same running it inside a container, but got a shell when running it directly in the host. This only shows that the exploit doesn't work inside a container. So, containers aren't vulnerable, or the script needs some adjustments to make it work in containers.
Since copy fail can be used to escape containers (https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...), I'm guessing the exploit needs some changes only.
Comment · 3 years ago
Not really open source, they are releasing their code under the BSL (Business Source License https://github.com/codecov/self-hosted/blob/main/LICENSE). But still great, and they use Django :D
It's also interesting that they will no longer offer a commercial self-hosted solution.
> As a part of this shift, we are offering a new self-hosted repo that makes it easy to run Codecov in a minimal docker-compose based setup for proof-of-concept and small volume deployments. We are end-of-lifing our commercial self-hosted offering, but will continue to provide support to existing customers who are running Codecov on-prem.