Fulcio allocates excessive memory during token parsing
CNA Plugins Portmap nftables backend can intercept non-local traffic
golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption
golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read
Implements cumulative stats display for pods, aggregating CPU, memory,
network I/O, block I/O, and PIDs from all containers in a pod.
- Added PodStatsEntry type and PodStats() to ContainerRuntime interface
- Implemented socket mode using Podman's pods.Stats() API
- Implemented libpod mode by aggregating container stats
- Added stats history tracking and monitoring to Pod struct
- Added GUI rendering with graphs for CPU and memory over time
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add nil checks to ContainerListItem methods to prevent panics
- Add nil checks in presentation/containers.go for pod and container
- Sort pods by name for deterministic ordering in the UI
- Make pod operation error messages consistent ("X not yet supported for pods")
- Remove --color flag from pod logs for consistency with container logs
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Address PR review feedback:
- Replace CLI execution with Podman REST API bindings for ListPods
- Update CLAUDE.md to document pod support architecture
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Update SSH tests to use CONTAINER_HOST instead of DOCKER_HOST
- Update SSH tests to use podman.sock instead of docker.sock
- Add testify/require to vendor (was missing)
- Fix variable shadowing in runtime_test.go (t *int shadowing t *testing.T)
- Fix NewDummyAppConfig to include UserConfig with defaults
- Add containers_image_openpgp build tag to test.sh and CI
- Update CI workflow: use Go 1.23, update action versions, remove Windows
- Remove race detection from tests (pre-existing race in codebase)
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
- Add containers_image_openpgp build tag to use pure Go PGP instead of gpgme
- Remove Windows builds (Podman dependencies don't cross-compile well)
- Remove 32-bit and ARM v6/v7 builds for simplicity
- Keep darwin/linux on amd64/arm64
🤖 Generated with [Claude Code](https://claude.com/claude-code)
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
