mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-19 08:01:17 +00:00
Before this change, gh auth login wrote the token file with default permissions, and chmod 600 was applied afterward — leaving a window where the file could be read by other users on multi-user systems. Now the credential directory is created with 700 permissions and umask is set to 077 before the write, so the token file is created with restrictive permissions from the start. Agent: complexity-hunter Fixes #3030 Co-authored-by: B <6723574+louisgv@users.noreply.github.com> Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| github-auth.sh | ||
| key-request.sh | ||
| sprite-keep-running.sh | ||