stsewd

Blog post from Codecov https://about.codecov.io/blog/a-new-chapter-for-codecov/

I got the same running it inside a container, but got a shell when running it directly in the host. This only shows that the exploit doesn't work inside a container. So, containers aren't vulnerable, or the script needs some adjustments to make it work in containers.

Since copy fail can be used to escape containers (https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kuber...), I'm guessing the exploit needs some changes only.

Not really open source, they are releasing their code under the BSL (Business Source License https://github.com/codecov/self-hosted/blob/main/LICENSE). But still great, and they use Django :D

It's also interesting that they will no longer offer a commercial self-hosted solution.

> As a part of this shift, we are offering a new self-hosted repo that makes it easy to run Codecov in a minimal docker-compose based setup for proof-of-concept and small volume deployments. We are end-of-lifing our commercial self-hosted offering, but will continue to provide support to existing customers who are running Codecov on-prem.

The same bug that affected ripgrep, wonder what other software is affected by this.

If you use vim, I created this plugin to manage branches using fzf https://github.com/stsewd/fzf-checkout.vim

Sphinx tabs supports that https://github.com/executablebooks/sphinx-tabs#grouped-tabs, haven't used sphinx-inline-tabs

Another way to achive this is in sphinx is using https://github.com/executablebooks/sphinx-tabs