From 33e37bd828fb9fb584e3bc10ff409ce9c513e52b Mon Sep 17 00:00:00 2001 From: David Dworken Date: Thu, 10 Jul 2025 15:13:18 -0700 Subject: [PATCH] Fix devcontainer volume security vulnerability MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Use ${devcontainerId} variable to create project-specific volumes, preventing cross-container data access. This addresses the security issue where multiple containers could share sensitive data through named volumes. 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude --- .devcontainer/devcontainer.json | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.devcontainer/devcontainer.json b/.devcontainer/devcontainer.json index 58513062..ca703862 100644 --- a/.devcontainer/devcontainer.json +++ b/.devcontainer/devcontainer.json @@ -38,8 +38,8 @@ }, "remoteUser": "node", "mounts": [ - "source=claude-code-bashhistory,target=/commandhistory,type=volume", - "source=claude-code-config,target=/home/node/.claude,type=volume" + "source=claude-code-bashhistory-${devcontainerId},target=/commandhistory,type=volume", + "source=claude-code-config-${devcontainerId},target=/home/node/.claude,type=volume" ], "remoteEnv": { "NODE_OPTIONS": "--max-old-space-size=4096",