fix(security): replace process.env spread with allowlist in blueprint runner - #1874

Merged

ericksoa merged 7 commits into

mainfrom

fix/runner-env-allowlist

Apr 14, 2026

Commits on Apr 14, 2026

fix(security): replace process.env spread with allowlist in blueprint runner

ericksoa
and
claude
committed
f6183ca
Merge branch 'main' into fix/runner-env-allowlist
ericksoa
authored
d3667d2
fix(security): add proxy, TLS, and openshell vars to subprocess allowlist

ericksoa
and
claude
committed
a87f5f4
refactor(security): extract shared subprocess-env allowlist module

ericksoa
and
claude
committed
be20f26
fix(security): revert onboard.ts to blocklist, remove internal refs

ericksoa
and
claude
committed
a5e9a7b
fix(test): address CodeRabbit review findings

ericksoa
and
claude
committed
c4e4c99
Merge branch 'main' into fix/runner-env-allowlist
cv
authored
1dc6109