fix(security): harden local credential capture - #6439

Merged

cv merged 22 commits into

mainfrom

codex/harden-local-credential-helper

Jul 8, 2026

Commits on Jul 8, 2026

fix(security): add one-shot credential helper
cv
committed
6546c08
docs(security): pin reviewed credential workflow
cv
committed
e4b81c0
test(security): linearize credential helper harness
cv
committed
f6d20f1
fix(security): pin credential form descriptor
cv
committed
a5d8d8b
docs(security): repin credential helper artifact
cv
committed
53cd27f
fix(security): address credential review findings
cv
committed
854a132
docs(security): repin reviewed credential artifacts
cv
committed
e84eda7
fix(security): sanitize approved command environment
cv
committed
24837cf
docs(security): repin sanitized credential artifacts
cv
committed
47789c7
fix(security): accept case-insensitive script tags
cv
committed
0c3f930
fix(security): canonicalize credential child policy
cv
committed
f393bba
docs(security): repin reviewed credential artifacts
cv
committed
b4e6ca6
fix(security): isolate credential execution profiles
cv
committed
7868566
docs(security): repin isolated credential artifacts
cv
committed
9254855
test(security): keep credential helper tests linear
cv
committed
78867a3
test(security): clarify generated cleanup marker
cv
committed
a413ba3
docs(starter-prompt): slim credential capture guidance (#6477)
miyoungc
authored
22f6ac3
Merge branch 'main' into codex/harden-local-credential-helper
cv
authored
99f293e
Merge branch 'main' into codex/harden-local-credential-helper
cv
authored
bdf3360
fix(security): drop ambient credential child environment
cjagwani
committed
dd61a30
docs(security): repin local credential artifacts
cjagwani
committed
e5be9d5
test(dcode): keep image suite within budget
cv
committed
ec50830

Navigation Menu

Uh oh!

fix(security): harden local credential capture - #6439

fix(security): harden local credential capture#6439
cv merged 22 commits into
mainfrom
codex/harden-local-credential-helper

Commits on Jul 8, 2026

fix(security): add one-shot credential helper

docs(security): pin reviewed credential workflow

test(security): linearize credential helper harness

fix(security): pin credential form descriptor

docs(security): repin credential helper artifact

fix(security): address credential review findings

docs(security): repin reviewed credential artifacts

fix(security): sanitize approved command environment

docs(security): repin sanitized credential artifacts

fix(security): accept case-insensitive script tags

fix(security): canonicalize credential child policy

docs(security): repin reviewed credential artifacts

fix(security): isolate credential execution profiles

docs(security): repin isolated credential artifacts

test(security): keep credential helper tests linear

test(security): clarify generated cleanup marker

docs(starter-prompt): slim credential capture guidance (#6477)

Merge branch 'main' into codex/harden-local-credential-helper

Merge branch 'main' into codex/harden-local-credential-helper

fix(security): drop ambient credential child environment

docs(security): repin local credential artifacts

test(dcode): keep image suite within budget