Skip to content

harden(tools): block AUXILIARY_*_API_KEY and _BASE_URL from subprocess env - #53503

Closed
srojk34 wants to merge 4 commits into
NousResearch:mainfrom
srojk34:fix/auxiliary-env-blocklist
Closed

harden(tools): block AUXILIARY_*_API_KEY and _BASE_URL from subprocess env#53503
srojk34 wants to merge 4 commits into
NousResearch:mainfrom
srojk34:fix/auxiliary-env-blocklist

fix(security): close two auxiliary-secret bypass paths in env scrubbing

cbdc39c
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / osv-scanner completed Jun 30, 2026 in 2s

1 configuration not found

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (osv-scanner.yml)

  • ❓  .github/workflows/osv-scanner.yml:osv-scan

View all branch alerts.