spawn/packages
A 58282f5727
fix: eliminate GitHub token temp file exposure in agent-setup (fixes #2462) (#2470)
Pass GITHUB_TOKEN directly via inline `export` in the remote SSH command
instead of writing it to local/remote temp files. This removes the race
condition window where tokens could be read from disk.

Agent: code-health

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-10 20:32:42 -04:00
..
cli fix: eliminate GitHub token temp file exposure in agent-setup (fixes #2462) (#2470) 2026-03-10 20:32:42 -04:00
shared refactor: restore @openrouter/spawn-shared workspace package (#2405) 2026-03-09 17:14:26 -07:00