frostebite 8a41533779 fix(orchestrator): use http.extraHeader for secure git authentication ...

Replace token-in-URL pattern with http.extraHeader for git clone and LFS
operations. The token no longer appears in clone URLs, git remote config,
or process command lines.

Add gitAuthMode input (default: 'header', legacy: 'url') so users can
fall back to the old behavior if needed.

Closes #785

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-05 08:30:51 +00:00

11 KiB

Raw Permalink Blame History

View Raw