Repository navigation

Add sensitive file access validation to bash tool - #38

Merged

claude[bot] merged 9 commits into

mainfrom

improve/20261013-065015

Oct 15, 2026

Merged

Add sensitive file access validation to bash tool#38
claude[bot] merged 9 commits into
mainfrom
improve/20261013-065015

Commits on Oct 13, 2026
- feat(bash): add validation for sensitive file access and secret exfiltration
  ssevera1
  committed
  3913c17
- fix(review): replace substring blocklist with argv-based sensitive command detection
  github-actions[bot]
  committed
  e2547ab
Commits on Oct 15, 2026
- fix(review): allow set option toggles and keep checking unparsable segments
  Scott Severance
  committed
  78a12a7
- fix: block xtrace when the command references a secret variable
  Scott Severance
  committed
  da365c5
- fix(review): allow variable assignments and check more file readers
  Scott Severance
  committed
  2c44174
- fix: check the command wrapped by env and block env with no command
  Scott Severance
  committed
  3806350
- fix: treat env -P and -a/--argv0 as taking an argument
  Scott Severance
  committed
  c3262e5
- fix: parse env options getopt-style and fail closed on unknown ones
  Scott Severance
  committed
  4af48f8
- fix: check commands run through wrappers such as timeout, nohup and sudo
  Scott Severance
  committed
  a8343db