Skip to content

fix(onboard): probe host pythons and fall back before Model Router venv setup - #3786

Merged
ericksoa merged 5 commits into
mainfrom
fix/model-router-python-fallback
May 19, 2026
Merged

ericksoa merged 5 commits into
mainfrom
fix/model-router-python-fallback

fix(onboard): harden model router python overrides

8e96ccd
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL succeeded May 19, 2026 in 2s

2 new alerts including 2 medium severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 2 medium

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 148 in src/lib/runner.ts

See this annotation in the file changed.

Code scanning / CodeQL

Indirect uncontrolled command line Medium

This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized command-line argument.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.

Check warning on line 238 in src/lib/runner.ts

See this annotation in the file changed.

Code scanning / CodeQL

Indirect uncontrolled command line Medium

This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized
environment variable
.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.
This command depends on an unsanitized environment variable.