spawn/sh
A 7378cab0b2
fix(security): add defensive validation to tmpdir cleanup in install.sh (#3000)
Adds a non-empty check after mktemp and guards the EXIT trap so rm -rf
only fires when tmpdir is non-empty and still a directory. This is a
defense-in-depth hardening — the current code is safe due to set -e,
but explicit validation is best practice for rm -rf operations.

Fixes #2998

Agent: code-health

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-26 11:26:56 +07:00
..
aws docs: add missing agent entries to all cloud READMEs (#2494) 2026-03-11 05:49:50 -04:00
cli fix(security): add defensive validation to tmpdir cleanup in install.sh (#3000) 2026-03-26 11:26:56 +07:00
digitalocean fix(do): skip _run_with_restart in headless mode to prevent duplicate droplets (#2805) 2026-03-19 16:12:25 -07:00
docker feat: add junie Dockerfile for Docker image builds (#2601) 2026-03-13 19:40:51 -07:00
e2e fix(e2e): improve interactive harness failure logging (#2951) 2026-03-24 08:45:19 -07:00
gcp feat(gcp): default boot disk to 40 GB, configurable via GCP_DISK_SIZE (#2867) 2026-03-22 11:21:05 +07:00
hetzner docs: add missing agent entries to all cloud READMEs (#2494) 2026-03-11 05:49:50 -04:00
local docs: add missing agent entries to all cloud READMEs (#2494) 2026-03-11 05:49:50 -04:00
shared fix: add sprite-keep-running.sh, remove Hetzner from Packer, cleanup on cancel (#2869) 2026-03-22 18:13:38 +00:00
sprite docs: add missing agent entries to all cloud READMEs (#2494) 2026-03-11 05:49:50 -04:00
test test: add unit tests for E2E bash test infrastructure (#2968) 2026-03-24 18:42:48 -07:00