WealthLab - WealthLab (Page 2)

Docker

Docker Content Trust Retirement: Migrate Before December 8

Docker will shut down notary.docker.io on December 8, 2026. Audit DCT dependencies and replace verification before disabling the legacy path.

Copilot policy control diagram showing global defaults, organization delegation, and explicit feature settings

Security

GitHub Copilot Global Defaults: Audit Unconfigured Features

GitHub is applying Copilot's global default to eligible unconfigured features through October 26. Audit policy inheritance before access changes silently.

Certificate trust chain warning beside an isolated Docker AI-agent sandbox

Security

Docker Sandboxes After the eMudhra CA Compromise

Docker rebuilt its built-in sandbox images after the eMudhra CA compromise. Existing sandboxes need recreation or trust-store updates.

Security

GitHub AI Scan for Pull Requests: What It Cannot Gate

GitHub AI Scan covers pull-request changes beyond CodeQL, but its findings cannot block merges. Use it as review evidence, not a security gate.

GitHub Copilot terminal inside a local sandbox boundary with filesystem and network controls

AI Agents

GitHub Copilot Local Sandboxing: Operator Checklist

GitHub Copilot local sandboxing limits agent access to files and networks, but operators still need to review defaults, credentials, and exceptions.

Podman checkpoint image annotation crossing a container sandbox boundary with an update shield

Security

Podman Checkpoint Image Sandbox Bypass: Update Checklist

Podman before 5.8.8 or 6.1.3 could let checkpoint metadata override sandbox controls. Check versions, image trust, rootful exposure, and updates.

Claude Code plugin commit pin flowing through a verified HEAD check and security shield

AI Agents

Claude Code Plugin Pin Bypass: Operator Update Checklist

Claude Code before 2.1.179 could bypass a plugin commit pin. Update, verify versions, review plugin sources, and rotate exposed secrets when warranted.

Docker

Docker Engine 29.9.1: containerd Image-Pull Security Checklist

Docker Engine 29.9.1 updates containerd for three image-pull flaws involving daemon crashes and host disk exhaustion. Check runtime versions, registry trust, capacity, and rollback readiness.

n8n workflows with a security patch checklist, backup, and verification steps

n8n

n8n October 2026 Security Update: Self-Hosted Patch Checklist

n8n disclosed 15 high- and medium-severity issues on October 14. Check your branch, back up state, patch promptly, and review exposed workflows and credentials.

Docker

Docker Hub CVE-2026-105445: What Operators Should Do

Docker fixed a critical Hub token-transfer flaw. Check whether you were notified, review PATs and image history, rotate CI credentials, and strengthen registry controls.

n8n workflow diagram with upgrade checklist, Docker container, backup, and rollback symbols

n8n

n8n 3.0 Upgrade Checklist for Self-Hosted Instances

Prepare a self-hosted n8n instance for 3.0: verify the release channel, run the Migration Report, replace removed nodes, back up, stage, and test rollback.

Hermes Agent

How to Install Hermes Agent on Linux Safely

Install Hermes Agent on Linux with an inspect-first workflow, isolated validation, exact observed results, troubleshooting, cleanup, and evidence limits.