stsewd

Blog post from Codecov https://about.codecov.io/blog/a-new-chapter-for-codecov/

I got the same running it inside a container, but got a shell when running it directly in the host. This only shows that the exploit doesn't work inside a container. So, containers aren't vulnerable, or the script needs some adjustments to make it work in containers.

Since copy fail can be used to escape containers (https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...), I'm guessing the exploit needs some changes only.

Not really open source, they are releasing their code under the BSL (Business Source License https://github.com/codecov/self-hosted/blob/main/LICENSE). But still great, and they use Django :D

It's also interesting that they will no longer offer a commercial self-hosted solution.

As a part of this shift, we are offering a new self-hosted repo that makes it easy to run Codecov in a minimal docker-compose based setup for proof-of-concept and small volume deployments. We are end-of-lifing our commercial self-hosted offering, but will continue to provide support to existing customers who are running Codecov on-prem.

The same bug that affected ripgrep, wonder what other software is affected by this.

If you use vim, I created this plugin to manage branches using fzf https://github.com/stsewd/fzf-checkout.vim

Sphinx tabs supports that https://github.com/executablebooks/sphinx-tabs#grouped-tabs, haven't used sphinx-inline-tabs

Another way to achive this is in sphinx is using https://github.com/executablebooks/sphinx-tabs

GitHub actions seems to be the new cool kid, if you are hosting on GitHub. Sadly to depend more on GitHub, though...

I have been experienced a lot of slow builds on several Open Source projects. You can see the drop around the 23rd.

we also did not wanted to pay for our open source software documentation generation + hosting.

Actually, rtd is free for OSS projects