Avoid exposing runtime secrets via base64 subprocesses - #36

Draft

mrjf with Copilot wants to merge 8 commits into

mainfrom

copilot/fix-secrets-visible-in-proc-cmdline

Commits on May 16, 2026

Initial plan
Copilot
authored
373c877
Secure runtime secret exports
Copilot
authored
2fc2255
Address validation feedback
Copilot
authored
77e5f11
Harden secret path handling
Copilot
authored
ec63a70
Align secret path validation
Copilot
authored
5db261f
Merge remote-tracking branch 'origin/main' into copilot/fix-secrets-visible-in-proc-cmdline
Copilot
authored
a572a7d
fix: write secret files through Bun stdin pipe
Copilot
authored
71c81df
Merge remote-tracking branch 'origin/main' into copilot/fix-secrets-visible-in-proc-cmdline
Copilot
authored
fc8b98c