spawn/sh
A 8c73bb9713
fix(security): replace fragile printenv with eval parameter expansion in timeout functions (#3238)
The get_provision_timeout and get_agent_timeout functions used printenv with
dynamically constructed variable names, which is fragile across shells and
platforms. Replace with eval-based parameter expansion using the already-
sanitized safe_agent variable (restricted to [A-Za-z0-9_]).

Fixes #3234

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-04-08 01:44:43 -07:00
..
aws feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
cli fix(security): use grep -F for literal string matching in PATH checks (#3021) 2026-03-27 02:56:07 +07:00
daytona fix(daytona): set per-sandbox user/org defaults (#3175) 2026-04-04 18:08:40 -07:00
digitalocean feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
docker fix(zeroclaw): remove broken zeroclaw agent (repo 404) (#3107) 2026-03-30 15:35:40 -07:00
e2e fix(security): replace fragile printenv with eval parameter expansion in timeout functions (#3238) 2026-04-08 01:44:43 -07:00
gcp feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
hetzner feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
local feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
shared fix(github-auth): add sudo availability check before use (#3072) 2026-03-28 08:39:22 +07:00
sprite feat: add Pi coding agent (shittycodingagent.ai) to spawn (#3128) 2026-03-31 17:34:34 -07:00
test fix(zeroclaw): remove broken zeroclaw agent (repo 404) (#3107) 2026-03-30 15:35:40 -07:00