frostebite 1f3affe097 fix(secrets): prevent shell injection in secret key names and mask values ...

- Validate secret key names against alphanumeric allowlist before shell interpolation
- Apply validation in both SecretSourceService.fetchSecret() and legacy queryOverride()
- Mask fetched secret values with core.setSecret() to prevent log exposure
- Add 20 new tests for validation and masking

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-05 12:55:18 +00:00

..

BlankProject

Parity Fixes with Test Runner (QOL Changes) (#607)

2023-12-12 22:10:57 -08:00

default-build-script

Simplify build profile loading logic (#762)

2025-11-21 19:12:40 -06:00

platforms

Ensures Visual C++ Redistributables for 2013 is installed (#757)

2025-11-02 07:17:16 -06:00

unity-config

Feature/support for unity licensing server linux (#468)

2022-10-22 18:55:58 +02:00

.DS_Store

Fix unity path (#552)

2023-07-27 22:15:13 +02:00

exec-child.js

Revert "triggerWorkflowOnComplete param for cloud runner"

2023-02-05 00:22:32 +00:00

index.js

fix(secrets): prevent shell injection in secret key names and mask values

2026-03-05 12:55:18 +00:00

index.js.map

fix(secrets): prevent shell injection in secret key names and mask values

2026-03-05 12:55:18 +00:00

licenses.txt

Cloud Runner Improvements - LTS Candidate - S3 Locking, Aws Local Stack (Pipelines), Testing Improvements, Rclone storage support, Provider plugin system (#731)

2026-03-03 06:05:12 +00:00

sourcemap-register.js

Code cleanup (#511)

2023-03-03 16:25:40 -08:00