Josh Hawkins 2ef2323fbd harden root writes into unprivileged-owned paths ...

Restrict the sweep sentinel to a mount at or below /media/frigate so a
parent /media mount cannot bless a later-shadowed volume. Rebuild
/tmp/nginx root-owned each start so root's cp and tempio writes cannot
follow a symlink an unprivileged nginx planted in the previous run.

2026-08-27 09:28:32 -05:00

..

rootfs

harden root writes into unprivileged-owned paths

2026-08-27 09:28:32 -05:00

build_intel_media_driver.sh

Manually build intel driver (#22881)

2026-04-15 07:07:27 -05:00

build_nginx.sh

http2 (#22379)

2026-03-11 08:32:16 -05:00

build_ov_model.py

Miscellaneous fixes (0.18 beta) (#23854)

2026-07-29 08:39:01 -06:00

build_pysqlite3.sh

Fix jetson build (#20808)

2025-11-05 07:10:56 -07:00

build_sqlite_vec.sh

Miscellaneous fixes (0.18 beta) (#23763)

2026-07-21 06:44:33 -06:00

Dockerfile

make bundled models readable by the runtime user

2026-08-27 09:05:59 -05:00

fake_frigate_run

Community Supported Boards Framework (#7114)

2023-07-23 16:45:29 -05:00

install_deps.sh

Container security hardening (phase 1) (#24061)

2026-08-23 10:50:03 -06:00

install_go2rtc.sh

Container security hardening (phase 1) (#24061)

2026-08-23 10:50:03 -06:00

install_hailort.sh

Container security hardening (phase 1) (#24061)

2026-08-23 10:50:03 -06:00

install_memryx.sh

update installation code to hold SDK 2.1 version (#20781)

2025-11-03 13:23:51 -07:00

install_s6_overlay.sh

Container security hardening (phase 1) (#24061)

2026-08-23 10:50:03 -06:00

install_tempio.sh

Container security hardening (phase 1) (#24061)

2026-08-23 10:50:03 -06:00

requirements-dev.txt

Increase ruff coverage (#23644)

2026-07-06 12:28:02 -05:00

requirements-ov.txt

Update OpenVINO model generation (#23733)

2026-07-16 08:00:52 -06:00

requirements-wheels.txt

remove all references to degirum in frigate (#23882)

2026-08-01 08:00:36 -06:00

requirements.txt

Various fixes (#20666)

2025-10-25 16:40:04 -05:00