| 文件 | 最后提交记录 | 最后更新时间 |
|---|---|---|
fix(metadata-collect): harden supply chain and path validation Address security threat-model findings: - Remove hardcoded wheel download; install pytest-testcase-collector from PyPI mirror instead - Restrict collection inputs to workspace and enforce output filename rules (metadata prefix, .xml suffix, charset allowlist) to eliminate downstream shell injection and workspace file overwrite - Add pytest-timeout input with GNU timeout wrapper to bound collection - Stop dumping full subprocess output on failure; chmod report 0600; sweep stale temp venv dirs at startup - Document trust model in README and restructure per repo template Co-authored-by: Trae <noreply@trae.ai> | 27 天前 | |
fix(metadata-collect): harden supply chain and path validation Address security threat-model findings: - Remove hardcoded wheel download; install pytest-testcase-collector from PyPI mirror instead - Restrict collection inputs to workspace and enforce output filename rules (metadata prefix, .xml suffix, charset allowlist) to eliminate downstream shell injection and workspace file overwrite - Add pytest-timeout input with GNU timeout wrapper to bound collection - Stop dumping full subprocess output on failure; chmod report 0600; sweep stale temp venv dirs at startup - Document trust model in README and restructure per repo template Co-authored-by: Trae <noreply@trae.ai> | 27 天前 |