mirror of
https://github.com/OpenRouterTeam/spawn.git
synced 2026-05-31 21:40:28 +00:00
Added chmod 600 to all temporary files that contain sensitive data (API keys, tokens, configs): - ENV_TEMP: 35 files (all agent scripts across 5 clouds) - OPENCLAW_CONFIG_TEMP: 5 files (already done in previous commit) - SETTINGS_TEMP: 5 files (Claude Code settings) - GLOBAL_STATE_TEMP: 5 files (Claude Code global state) - DOTENV_TEMP: 5 files (NanoClaw .env files) Total: 55 temp files secured This prevents race conditions where sensitive data could be read by other users between mktemp creation (mode 600 by default) and data being written. Security hardening for task #23. Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| lib | ||
| aider.sh | ||
| claude.sh | ||
| codex.sh | ||
| goose.sh | ||
| interpreter.sh | ||
| nanoclaw.sh | ||
| openclaw.sh | ||