spawn/sh
A e9f8d5ec2d
fix: secure curl header args and provision.sh export whitelist (fixes #2464, fixes #2465) (#2471)
- Replace `-H "Authorization: Bearer ..."` curl args with temp curl config
  files (`-K`) in digitalocean.sh and hetzner.sh e2e drivers, keeping API
  tokens out of `ps` output
- Replace dangerous-var blocklist in provision.sh with a positive whitelist
  of allowed cloud_headless_env variable names

Agent: complexity-hunter

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-10 17:54:32 -07:00
..
aws fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
cli fix: safe printf format strings and document e2e source usage (#2445) 2026-03-10 12:28:45 -04:00
digitalocean fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
docker fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
e2e fix: secure curl header args and provision.sh export whitelist (fixes #2464, fixes #2465) (#2471) 2026-03-10 17:54:32 -07:00
gcp fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
hetzner fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
local fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
shared fix(security): fail on chmod error in github-auth.sh token persistence (#2375) 2026-03-09 08:18:07 -04:00
sprite fix: pin bun install to v1.3.9 in all agent scripts (#2345) 2026-03-08 12:47:18 -04:00
test refactor: Remove dead code and stale references (#2062) 2026-03-01 11:45:24 -05:00