fix(security): keep credential-bearing PostgreSQL DSNs out of argv - #180

Merged

seonghobae merged 10 commits into

mainfrom

fix/cli-dsn-argv-secret-boundary

Aug 13, 2026

Commits on Aug 13, 2026

test(cli): reject credential-bearing DSNs from argv
seonghobae
committed
c1a3abb
test(cli): reject malformed DSN without reflection
seonghobae
committed
80b4758
fix(cli): reject credential-bearing DSN argv
seonghobae
committed
93cd180
docs(cli): define credential-free DSN argv boundary
seonghobae
committed
8a0f822
merge(main): compose protected security result into CLI DSN boundary
seonghobae
committed
a1b779b
test(security): cover all credential-bearing DSN parameters
seonghobae
committed
8560edb
merge(main): integrate protected streaming head into CLI DSN hardening
seonghobae
committed
035d45e
test(security): require loopback health listener default
seonghobae
committed
16973ed
fix(security): default readiness listener to loopback
seonghobae
committed
c59549f
chore: preserve cli source newline
seonghobae
committed
584defa