Dmitry Ng 0da3892b0d fix(docker): clarify container capability management in Docker setup ...

- Updated the documentation in `docker.md` to provide a detailed explanation of the explicit capability allow-list used for primary containers, emphasizing the rationale behind the selected capabilities and the deliberate omission of `MKNOD`.
- Revised comments in `client.go` and `tools.go` to reflect the decision against using `no-new-privileges`, clarifying its impact on privilege escalation testing and container security.
- Enhanced the overall clarity and completeness of the capability management section to aid understanding of security measures in the Docker-in-Docker setup.

2026-07-29 22:33:14 +03:00

..

client_test.go

Merge branch 'integrate/open-prs-v2' into feature/next-release

2026-07-22 01:25:25 +03:00

client.go

fix(docker): clarify container capability management in Docker setup

2026-07-29 22:33:14 +03:00