Jose Diaz-Gonzalez 6eb8b8632c fix: enforce 0600 permissions on .netrc credentials file ...

The previous use of `touch` before `netrc set` allowed the file to inherit the umask and be world-readable, exposing stored git credentials to local users. The set and unset paths now explicitly chmod 0600 and chown to the dokku user, and the plugin install hook repairs permissions on already-affected installations.

2026-05-09 12:22:17 -04:00

..

00_dokku-standard

Release 0.38.1

2026-05-07 17:29:53 +00:00

20_events

Release 0.38.1

2026-05-07 17:29:53 +00:00

app-json

Release 0.38.1

2026-05-07 17:29:53 +00:00

apps

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-dockerfile

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-herokuish

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-lambda

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-nixpacks

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-null

Release 0.38.1

2026-05-07 17:29:53 +00:00

builder-pack

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

builder-railpack

Merge pull request #8578 from dokku/8566-core-post-extract-in-four-builder-plugins-fails-under-bash-5-3

2026-05-08 17:06:10 -04:00

buildpacks

Release 0.38.1

2026-05-07 17:29:53 +00:00

builds

…

caddy-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

certs

Release 0.38.1

2026-05-07 17:29:53 +00:00

checks

Release 0.38.1

2026-05-07 17:29:53 +00:00

common

Release 0.38.1

2026-05-07 17:29:53 +00:00

config

Release 0.38.1

2026-05-07 17:29:53 +00:00

cron

Release 0.38.1

2026-05-07 17:29:53 +00:00

docker-options

Release 0.38.1

2026-05-07 17:29:53 +00:00

domains

Release 0.38.1

2026-05-07 17:29:53 +00:00

enter

Release 0.38.1

2026-05-07 17:29:53 +00:00

git

fix: enforce 0600 permissions on .netrc credentials file

2026-05-09 12:22:17 -04:00

haproxy-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

logs

Release 0.38.1

2026-05-07 17:29:53 +00:00

network

Release 0.38.1

2026-05-07 17:29:53 +00:00

nginx-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

openresty-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00

plugin

Release 0.38.1

2026-05-07 17:29:53 +00:00

ports

Release 0.38.1

2026-05-07 17:29:53 +00:00

proxy

Release 0.38.1

2026-05-07 17:29:53 +00:00

ps

Release 0.38.1

2026-05-07 17:29:53 +00:00

registry

Release 0.38.1

2026-05-07 17:29:53 +00:00

repo

Release 0.38.1

2026-05-07 17:29:53 +00:00

resource

Release 0.38.1

2026-05-07 17:29:53 +00:00

run

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-docker-local

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-k3s

Release 0.38.1

2026-05-07 17:29:53 +00:00

scheduler-null

Release 0.38.1

2026-05-07 17:29:53 +00:00

shell

Release 0.38.1

2026-05-07 17:29:53 +00:00

ssh-keys

Release 0.38.1

2026-05-07 17:29:53 +00:00

storage

Release 0.38.1

2026-05-07 17:29:53 +00:00

trace

Release 0.38.1

2026-05-07 17:29:53 +00:00

traefik-vhosts

Release 0.38.1

2026-05-07 17:29:53 +00:00