| Files | Last commit | Last update |
|---|---|---|
fix(git): set GIT_TERMINAL_PROMPT=0 to prevent non-TTY block | 2 months ago | |
fix(git): set GIT_TERMINAL_PROMPT=0 to prevent non-TTY block | 2 months ago | |
security(git): add ValidateDir + -- separator to git clone directory args (#396) - Add git.ValidateDir to reject directory names starting with "-" or containing control characters, preventing git option injection via the clone target directory. - Insert "--" separator before the repository URL in clone.go and git/repo.go Clone/CloneWithProtocol so both URL and directory are treated as positional args. - Add unit tests: ValidateDir table-driven + injection attempts, clone command rejection of injection directories, separator presence, and acceptance of valid directories (non-ASCII, spaces). | 3 months ago |