Does a secret leave your machine through Claude Code? An end-to-end leak test bench.
You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
 

9 lines
483 B

# claude-code-redact (rdx), built from a local checkout used as the build context.
# podman build -f containers/rdx.Containerfile -t leak-bench-rdx:<commit> ~/git/claude-code-redact
ARG FEDORA=44
FROM registry.fedoraproject.org/fedora-minimal:${FEDORA}
RUN microdnf -y install --setopt=install_weak_deps=0 python3 && microdnf clean all
COPY . /src
RUN python3 -m venv /app && /app/bin/pip install --no-cache-dir /src && rm -rf /src
ENV PATH=/app/bin:$PATH HOME=/tmp
USER 1000:1000