spawn/sh/cli
A e11918be59
fix: add --proto '=https' to remaining curl commands in install.sh and github-auth.sh (#2351)
Fixes #2350: Cloud agent scripts (AWS, GCP, Hetzner, Local, Sprite) already
had this flag from prior fixes. This commit adds the missing --proto '=https'
to user-facing curl instructions in sh/cli/install.sh (3 echo lines, 2 comment
lines) and usage comments in sh/shared/github-auth.sh (3 comment lines) to
prevent protocol downgrade attacks.

Agent: security-auditor

Co-authored-by: B <6723574+louisgv@users.noreply.github.com>
Co-authored-by: Claude Sonnet 4.5 <noreply@anthropic.com>
2026-03-08 22:43:25 +00:00
..
install.ps1 refactor: remove packages/shared, deduplicate with CLI shared (#2257) 2026-03-06 21:58:42 -05:00
install.sh fix: add --proto '=https' to remaining curl commands in install.sh and github-auth.sh (#2351) 2026-03-08 22:43:25 +00:00