Repository navigation

fix(e2e): build changed sandbox images locally - #10263

Merged

cv merged 57 commits into

mainfrom

fix/e2e-local-build-for-image-changes

Aug 31, 2026

Merged

fix(e2e): build changed sandbox images locally#10263
cv merged 57 commits into
mainfrom
fix/e2e-local-build-for-image-changes

GitHub Advanced Security / CodeQL failed Aug 29, 2026 in 2s

35 new alerts including 29 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

29 high
6 medium

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 448 in src/lib/sandbox-base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 440 in src/lib/sandbox-base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 299 in src/lib/sandbox-base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 288 in src/lib/sandbox-base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 3413 in src/lib/policy/index.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 3139 in src/lib/policy/index.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 2071 in src/lib/policy/index.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 651 in src/lib/onboard/dashboard.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 258 in src/lib/agent/onboard.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 27 in src/lib/agent/list-command.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 723 in src/lib/agent/base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 714 in src/lib/agent/base-image.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 3983 in src/lib/actions/uninstall/run-plan.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.

Check failure on line 414 in src/lib/actions/sandbox/rebuild-flow-helpers.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1323 in scripts/checks/run-managed-image-openshell-e2e.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1741 in src/lib/actions/sandbox/connect.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.

Check failure on line 2162 in src/lib/actions/sandbox/connect.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 48 in src/lib/actions/sandbox/mcp-bridge-render.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 336 in src/lib/actions/sandbox/mcp-bridge.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 363 in src/lib/actions/sandbox/mcp-bridge.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 647 in src/lib/actions/sandbox/policy-channel.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1240 in src/lib/actions/sandbox/policy-channel.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1342 in src/lib/actions/sandbox/policy-channel.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1454 in src/lib/actions/sandbox/policy-channel.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.

Check failure on line 1460 in src/lib/actions/sandbox/policy-channel.ts

Code scanning / CodeQL

Clear-text logging of sensitive information High

This logs sensitive data returned by

as clear text.
This logs sensitive data returned by

as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.
This logs sensitive data returned by process environment as clear text.