fix(mcp): reject mutable catalog refs at runtime - #38018

fix(mcp): reject mutable catalog refs at runtime#38018

coygeek wants to merge 1 commit into

NousResearch:mainNousResearch/hermes-agent:mainfrom

coygeek:fix/optional-mcp-catalog-installs-a-floating-git-ref-whose-bootstrap-executes-attacker-controlled-code-in-the-agent-venv-with-access-to-operator-credentialscoygeek/hermes-agent:fix/optional-mcp-catalog-installs-a-floating-git-ref-whose-bootstrap-executes-attacker-controlled-code-in-the-agent-venv-with-access-to-operator-credentialsCopy head branch name to clipboard