Destructive Command Guard

v0.6.7 Security

This release includes 2 security fixes for security teams reviewing exposed deployments.

Published 12d Developer Productivity

View tool

✓ No known CVEs patched

Read the diff → Tool health → What is this tool? →

This release patches 2 known CVEs

Topics

ai-agents cli developer-tools git rust safety

Affected surfaces

rce_ssrf

ReleasePort's take

Moderate signal

editorial:auto 12d

The release blocks dangerous Git refspec forms and closes a critical stdin bypass across major database clients.

Why it matters: Blocks high‑severity (90) Git leading-plus force‑refspec abuse; eliminates a CVE‑level (95 severity) input bypass in Redis, PostgreSQL, MySQL/MariaDB, MongoDB, and SQLite. Immediate attention required for security configurations.

Summary

AI summary

Updates Highlights, Validation, and Rust across a mixed release.

Changes in this release

Type	Severity	Summary	CVE
Security
Security	Critical	Blocks Git leading-plus force-refspec forms in strict mode. Blocks Git leading-plus force-refspec forms in strict mode. Source: llm_adapter@2026-07-15 Confidence: high	—
Security	Critical	Closes database-client stdin bypass class across Redis, PostgreSQL, MySQL/MariaDB, MongoDB, and SQLite; dynamic or unsafe input now fails closed. Closes database-client stdin bypass class across Redis, PostgreSQL, MySQL/MariaDB, MongoDB, and SQLite; dynamic or unsafe input now fails closed. Source: llm_adapter@2026-07-15 Confidence: high	—
Security	High	Adds strict minisign verification to both installers and strengthens archive-layout, version-selection, and installed-version checks. Adds strict minisign verification to both installers and strengthens archive-layout, version-selection, and installed-version checks. Source: llm_adapter@2026-07-15 Confidence: high	—
Feature	Low	Makes PowerShell installer compatible with ConstrainedLanguage primitives using signed inbox tooling for hashing and archive handling. Makes PowerShell installer compatible with ConstrainedLanguage primitives using signed inbox tooling for hashing and archive handling. Source: llm_adapter@2026-07-15 Confidence: high	—
Bugfix	Medium	Fixes project allowlist handling outside Git repositories and false positives in recursive delete, sed substitution, and environment-flag semantics. Fixes project allowlist handling outside Git repositories and false positives in recursive delete, sed substitution, and environment-flag semantics. Source: llm_adapter@2026-07-15 Confidence: high	—

Full changelog

dcg v0.6.7

Security and correctness release focused on indirect command input, strict Git enforcement, installer integrity, and Windows policy compatibility.

Highlights

Closes the database-client stdin bypass class across Redis, PostgreSQL, MySQL/MariaDB, MongoDB, and SQLite. Bounded static producers, redirects, heredocs, script loaders, and command substitutions are evaluated with the consumer pack; dynamic or unsafe input fails closed.
Blocks Git's leading-plus force-refspec forms, including constructed variants, in strict mode.
Fixes project allowlists outside Git repositories, quoted /tmp recursive-delete false positives, inert sed-substitution false positives, and n/N environment-flag semantics.
Makes the PowerShell installer compatible with ConstrainedLanguage primitives by using signed inbox tooling for hashing and archive handling.
Adds strict minisign verification to both installers and strengthens archive-layout, version-selection, and installed-version checks.

Release integrity

All six binaries were built manually from annotated tag v0.6.7 at commit d847471364adf24d819c34a96058bc136cdc00b1; repository GitHub Actions workflows were disabled before the commit/tag push and were not used for builds or publication. Archives contain exactly one root-level dcg or dcg.exe.

Release assets include SHA-256 checksums, minisign signatures using key ID 36B847D11BA5A0D0, signed DSR local-build SLSA provenance statements, and a source-tree SPDX SBOM. No Sigstore bundle is claimed for these manual builds.

Verify an artifact with:

sha256sum -c dcg-<target>.<archive>.sha256
minisign -Vm dcg-<target>.<archive> -P RWTQoKUb0Ue4NsqTpPWnABCrIU0+m25zsMlbv6UcRClQ7jmRP3A7NmTB

Validation

Rust: check, clippy with warnings denied, formatting, full tests, audit, and cargo-deny gates passed.
Packaging: crates.io dry-run, unpacked-crate build, all-target compile, and packaged runtime proof passed.
Installers: 165/165 Bats and 15/15 PowerShell tests passed.
End to end: 323/323 release-binary scenarios and the hermetic scan golden passed on a quiet real Linux host.

The crate is also available from crates.io as destructive_command_guard 0.6.7.

See CHANGELOG.md in the tagged source for the complete technical detail.

Security Fixes

Closes database-client stdin bypass class across Redis, PostgreSQL, MySQL/MariaDB, MongoDB, and SQLite
Blocks Git leading-plus force-refspec forms in strict mode

View diff on GitHub

Weekly OSS security release digest.

The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.

No spam, unsubscribe anytime.

Share this release

Share on X Share on Bluesky

Track Destructive Command Guard

Get notified when new releases ship.

About Destructive Command Guard

All releases →