diff --git a/Dockerfile b/Dockerfile
index ddb6e09..32a3859 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -130,6 +130,9 @@ RUN mkdir -p /app/sessions /app/deliverables /app/repos && \
 # Switch to non-root user
 USER pentest
 
+# Configure Git to trust all directories
+RUN git config --global --add safe.directory '*'
+
 # Set environment variables
 ENV NODE_ENV=production
 ENV PATH="/usr/local/bin:$PATH"
diff --git a/README.md b/README.md
index 1343dbf..cc379af 100644
--- a/README.md
+++ b/README.md
@@ -198,6 +198,25 @@ docker run --rm -it \
 - `--cap-add=NET_ADMIN` - Allows network administration for security tools
 - `--network host` - Provides access to target network interfaces
 
+**Testing Local Applications:**
+
+Docker containers cannot reach `localhost` on your host machine. Use `host.docker.internal` in place of `localhost`:
+
+```bash
+docker run --rm -it \
+      --add-host=host.docker.internal:host-gateway \
+      --cap-add=NET_RAW \
+      --cap-add=NET_ADMIN \
+      -e CLAUDE_CODE_OAUTH_TOKEN="$CLAUDE_CODE_OAUTH_TOKEN" \
+      -e CLAUDE_CODE_MAX_OUTPUT_TOKENS=64000 \
+      -v "$(pwd)/repos:/app/repos" \
+      -v "$(pwd)/configs:/app/configs" \
+      shannon:latest \
+      "http://host.docker.internal:3000" \
+      "/app/repos/your-app" \
+      --config /app/configs/example-config.yaml
+```
+
 ### Configuration (Optional)
 
 While you can run without a config file, creating one enables authenticated testing and customized analysis.
diff --git a/src/checkpoint-manager.js b/src/checkpoint-manager.js
index 3dfe2aa..5a99e12 100644
--- a/src/checkpoint-manager.js
+++ b/src/checkpoint-manager.js
@@ -154,8 +154,8 @@ const runSingleAgent = async (agentName, session, pipelineTestingMode, runClaude
   // Handle relative config paths - prepend configs/ if needed
   let configPath = null;
   if (session.configFile) {
-    configPath = session.configFile.startsWith('configs/') 
-      ? session.configFile 
+    configPath = path.isAbsolute(session.configFile) || session.configFile.startsWith('configs/')
+      ? session.configFile
       : path.join('configs', session.configFile);
   }