Skip to content

Update SQLite and verify native library loading - #61

Merged
brspoon merged 8 commits into
mainfrom
brspoon/sqlite-runtime-security
Nov 4, 2026
Merged

brspoon merged 8 commits into
mainfrom
brspoon/sqlite-runtime-security

Conversation

@brspoon

@brspoon brspoon commented Nov 4, 2026 •

Copy link
Copy Markdown
Owner

Build SQLite 3.54.1 from pinned upstream sources so SQLite enforces expression-depth limits. Verify that Python loads the reviewed library and retain its matching sources and notices.

Verify the SQLite shell is absent from the image. Record the fixed library match and the absent shell match in the scanner policy while preserving the original reports.

Validation

  • Python suite and PR checks, including CodeQL.
  • Native amd64 and arm64 builds, runtime probes, installation and recovery, scan acceptance, and full source archive verification. Native validation

@brspoon
brspoon marked this pull request as ready for review November 4, 2026 03:21
@brspoon
brspoon merged commit 8c7259f into main Nov 4, 2026
27 of 28 checks passed
@brspoon
brspoon deleted the brspoon/sqlite-runtime-security branch November 4, 2026 03:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants