smolmachines env contract and secret-safe injection #135

Closed
opened 2026-06-02 05:11:36 -04:00 by didericis-claude · 0 comments
Collaborator

Tracked by PRD 0038. Manifest env entries bypass resolve_env(); secret/interpolated env handling diverges from Docker; values are exposed on smolvm host argv. See audit issue #134 rank 1.

Tracked by PRD 0038. Manifest env entries bypass `resolve_env()`; secret/interpolated env handling diverges from Docker; values are exposed on smolvm host argv. See audit issue #134 rank 1.
didericis added the Kind/EnhancementKind/Security labels 2026-06-02 10:38:40 -04:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: didericis/bot-bottle#135