nicochow
bbcfd368bf
fix(sandbox): scrub SSH_AUTH_SOCK from the sandbox subprocess env ( #5145 )
...
SSH_AUTH_SOCK points at the host's ssh-agent socket. A sandbox
subprocess that inherits it can sign and authenticate with every key
the agent holds (git push, ssh logins) without reading any key file --
the same credential-pointer leak class as the *_ASKPASS helpers the
env policy already scrubs deliberately. No wildcard pattern fits
(*AUTH* would strip benign names), so add an exact entry to
_BLOCKED_EXACT_NAMES.
A skill that genuinely needs the agent socket can still declare it via
required-secrets: injected values win over the blocklist by design.
Co-authored-by: zhouyujie <zhouyujie@keep.com>
2026-09-02 19:05:50 +08:00
..
2026-09-02 12:34:09 +08:00
2026-09-01 16:49:39 +08:00
2026-09-01 16:13:41 +08:00
2026-08-30 10:30:34 +08:00
2026-08-24 11:04:23 +08:00
2026-08-24 08:52:01 +08:00
2026-08-24 11:04:23 +08:00
2026-09-02 12:34:09 +08:00
2026-08-08 20:36:13 +08:00
2026-08-24 11:04:23 +08:00
2026-08-31 14:35:08 +08:00
2026-08-31 14:35:08 +08:00
2026-09-02 09:23:04 +08:00
2026-09-01 22:01:21 +08:00
2026-08-24 07:45:30 +08:00
2026-08-13 23:55:30 +08:00
2026-08-13 23:55:30 +08:00
2026-08-23 09:57:12 +08:00
2026-08-27 14:59:31 +08:00
2026-08-22 16:53:32 +08:00
2026-08-25 07:49:38 +08:00
2026-09-01 22:36:31 +08:00
2026-08-23 09:57:12 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-08-29 14:36:38 +08:00
2026-09-02 09:23:04 +08:00
2026-08-30 21:25:05 +08:00
2026-08-15 21:41:21 +08:00
2026-08-14 12:35:24 +08:00
2026-08-05 08:29:22 +08:00
2026-08-31 23:18:34 +08:00
2026-08-14 23:29:04 +08:00
2026-08-29 08:01:38 +08:00
2026-08-11 21:56:20 +08:00
2026-08-23 09:57:12 +08:00
2026-08-11 21:04:55 +08:00
2026-08-13 23:55:30 +08:00
2026-08-24 07:37:35 +08:00
2026-08-24 07:37:35 +08:00
2026-09-01 16:49:39 +08:00
2026-09-02 11:54:40 +08:00
2026-08-25 07:49:38 +08:00
2026-08-30 15:37:38 +08:00
2026-08-24 21:48:37 +08:00
2026-08-23 15:08:39 +08:00
2026-08-23 15:43:37 +08:00
2026-08-23 09:57:12 +08:00
2026-08-25 07:49:38 +08:00
2026-08-13 23:55:30 +08:00
2026-08-12 09:25:05 +08:00
2026-08-08 21:07:55 +08:00
2026-08-30 21:25:05 +08:00
2026-08-17 08:20:42 +08:00
2026-09-01 16:13:41 +08:00
2026-08-13 23:55:30 +08:00
2026-08-05 08:29:22 +08:00
2026-08-13 23:55:30 +08:00
2026-08-23 10:45:30 +08:00
2026-08-27 17:56:56 +08:00
2026-08-24 21:48:37 +08:00
2026-08-18 23:14:17 +08:00
2026-08-28 10:30:30 +08:00
2026-08-16 11:53:21 +08:00
2026-08-11 21:52:12 +08:00
2026-09-02 09:23:04 +08:00
2026-08-23 09:57:12 +08:00
2026-08-04 22:33:26 +08:00
2026-08-23 09:57:12 +08:00
2026-09-01 16:49:39 +08:00
2026-08-11 16:33:22 +08:00
2026-08-23 09:57:12 +08:00
2026-08-13 23:55:30 +08:00
2026-08-04 22:33:26 +08:00
2026-08-04 22:33:26 +08:00
2026-08-23 09:57:12 +08:00
2026-08-14 23:30:03 +08:00
2026-08-04 22:33:26 +08:00
2026-08-04 22:33:26 +08:00
2026-08-13 23:55:30 +08:00
2026-08-29 23:50:45 +08:00
2026-08-11 16:33:22 +08:00
2026-08-11 16:33:22 +08:00
2026-08-11 16:33:22 +08:00
2026-09-01 10:56:43 +08:00
2026-08-12 09:25:05 +08:00
2026-08-23 15:08:39 +08:00
2026-08-25 07:49:38 +08:00
2026-08-23 10:45:30 +08:00
2026-08-13 23:55:30 +08:00
2026-09-01 22:04:17 +08:00
2026-08-15 14:26:38 +08:00
2026-08-13 23:55:30 +08:00
2026-08-13 23:55:30 +08:00
2026-08-14 23:50:40 +08:00
2026-08-13 23:55:30 +08:00
2026-09-01 22:04:17 +08:00
2026-08-19 22:06:16 +08:00
2026-08-14 12:35:24 +08:00
2026-08-30 15:06:55 +08:00
2026-09-01 10:56:43 +08:00
2026-08-23 09:57:12 +08:00
2026-08-23 15:46:10 +08:00
2026-08-23 15:08:39 +08:00
2026-08-17 08:22:11 +08:00
2026-08-30 11:39:25 +08:00
2026-08-17 08:16:14 +08:00
2026-09-02 14:19:37 +08:00
2026-08-23 15:00:37 +08:00
2026-08-15 21:20:34 +08:00
2026-08-15 21:20:34 +08:00
2026-08-16 23:54:06 +08:00
2026-08-15 21:20:34 +08:00
2026-09-01 15:37:19 +08:00
2026-08-31 14:35:08 +08:00
2026-08-25 07:49:38 +08:00
2026-08-12 08:47:42 +08:00
2026-09-01 16:13:41 +08:00
2026-08-30 15:06:55 +08:00
2026-09-01 10:56:43 +08:00
2026-08-31 14:35:08 +08:00
2026-09-02 10:25:37 +08:00
2026-08-29 14:54:02 +08:00
2026-08-24 11:04:23 +08:00
2026-08-24 11:04:23 +08:00
2026-08-31 15:07:30 +08:00
2026-09-01 23:24:49 +08:00
2026-09-01 23:24:49 +08:00
2026-08-20 08:57:10 +08:00
2026-08-31 15:07:30 +08:00
2026-08-31 15:07:30 +08:00
2026-08-30 11:36:26 +08:00
2026-08-05 08:56:18 +08:00
2026-08-15 14:26:38 +08:00
2026-08-15 14:26:38 +08:00
2026-08-27 10:42:42 +08:00
2026-08-15 14:26:38 +08:00
2026-08-22 16:53:32 +08:00
2026-08-15 14:26:38 +08:00
2026-08-23 15:30:21 +08:00
2026-08-28 10:37:01 +08:00
2026-08-15 14:26:38 +08:00
2026-08-15 14:26:38 +08:00
2026-08-24 06:57:55 +08:00
2026-08-15 14:26:38 +08:00
2026-09-01 23:24:49 +08:00
2026-09-01 15:26:33 +08:00
2026-08-17 08:20:42 +08:00
2026-08-11 16:33:22 +08:00
2026-09-01 16:49:39 +08:00
2026-08-17 08:20:42 +08:00
2026-08-25 08:29:18 +08:00
2026-08-17 08:20:42 +08:00
2026-09-01 16:49:39 +08:00
2026-09-01 15:26:33 +08:00
2026-08-17 08:20:42 +08:00
2026-08-29 16:56:56 +08:00
2026-08-23 09:57:12 +08:00
2026-08-29 23:50:45 +08:00
2026-08-29 23:50:45 +08:00
2026-08-29 23:50:45 +08:00
2026-08-29 23:50:45 +08:00
2026-08-28 22:24:10 +08:00
2026-08-14 23:50:40 +08:00
2026-08-31 15:22:45 +08:00
2026-09-01 15:51:37 +08:00
2026-09-02 09:23:04 +08:00
2026-08-11 13:56:02 +08:00
2026-08-07 11:22:00 +08:00
2026-09-01 15:51:37 +08:00
2026-08-29 23:50:45 +08:00
2026-08-29 23:50:45 +08:00
2026-08-29 23:50:45 +08:00
2026-08-23 09:57:12 +08:00
2026-08-29 23:50:45 +08:00
2026-08-14 11:07:23 +08:00
2026-08-05 07:43:54 +08:00
2026-08-05 07:43:54 +08:00
2026-08-31 14:35:08 +08:00
2026-08-31 14:35:08 +08:00
2026-08-31 14:35:08 +08:00
2026-08-25 16:57:55 +08:00
2026-08-25 16:57:55 +08:00
2026-08-13 21:20:49 +08:00
2026-08-29 16:56:56 +08:00
2026-09-01 16:49:39 +08:00
2026-08-31 14:35:08 +08:00
2026-08-31 23:17:39 +08:00
2026-08-27 14:59:31 +08:00
2026-08-25 08:22:57 +08:00
2026-09-01 22:04:17 +08:00
2026-09-01 22:04:17 +08:00
2026-08-22 16:53:32 +08:00
2026-09-01 16:49:39 +08:00
2026-08-22 16:53:32 +08:00
2026-08-05 08:56:18 +08:00
2026-08-22 16:53:32 +08:00
2026-09-01 10:56:43 +08:00
2026-08-30 15:29:51 +08:00
2026-08-30 10:30:34 +08:00
2026-08-31 14:35:08 +08:00
2026-08-30 10:30:34 +08:00
2026-08-24 15:27:33 +08:00
2026-09-01 10:56:43 +08:00
2026-09-01 10:56:43 +08:00
2026-08-24 15:38:32 +08:00
2026-08-24 15:38:32 +08:00
2026-08-24 15:38:32 +08:00
2026-08-24 15:38:32 +08:00
2026-08-24 15:38:32 +08:00
2026-08-27 14:59:31 +08:00
2026-08-24 15:38:32 +08:00
2026-08-24 07:09:08 +08:00
2026-08-30 21:25:05 +08:00
2026-08-24 21:27:43 +08:00
2026-08-28 10:30:30 +08:00
2026-08-28 10:44:30 +08:00
2026-08-28 22:24:10 +08:00
2026-09-02 17:05:36 +08:00
2026-08-31 14:35:08 +08:00
2026-09-02 19:05:50 +08:00
2026-09-02 16:54:23 +08:00
2026-08-25 19:46:04 +08:00
2026-08-28 08:58:59 +08:00
2026-09-02 11:54:40 +08:00
2026-08-28 08:58:59 +08:00
2026-08-28 08:58:59 +08:00
2026-08-31 15:22:45 +08:00
2026-09-02 00:33:21 +08:00
2026-09-01 15:26:33 +08:00
2026-09-01 15:51:37 +08:00
2026-08-30 10:46:01 +08:00
2026-09-01 15:51:37 +08:00
2026-08-25 07:49:38 +08:00
2026-08-25 07:49:38 +08:00
2026-08-25 07:49:38 +08:00
2026-08-25 07:49:38 +08:00
2026-08-30 10:43:58 +08:00
2026-09-02 11:54:40 +08:00
2026-09-02 11:54:40 +08:00
2026-08-25 07:49:38 +08:00
2026-08-24 11:04:23 +08:00
2026-08-30 11:39:25 +08:00
2026-08-25 07:49:38 +08:00
2026-09-01 16:13:41 +08:00
2026-08-24 11:04:23 +08:00
2026-08-22 16:47:11 +08:00
2026-08-23 09:57:12 +08:00
2026-09-02 10:25:37 +08:00
2026-08-30 21:25:05 +08:00
2026-08-23 10:27:19 +08:00
2026-08-27 18:12:05 +08:00
2026-09-02 09:23:04 +08:00
2026-08-30 14:30:16 +08:00
2026-08-11 22:00:57 +08:00
2026-08-25 08:29:18 +08:00
2026-09-01 15:26:33 +08:00
2026-09-01 22:04:17 +08:00
2026-08-31 14:35:08 +08:00
2026-09-02 14:40:12 +08:00
2026-08-11 11:41:31 +08:00
2026-08-12 09:25:05 +08:00
2026-09-01 14:15:26 +08:00
2026-08-22 16:53:32 +08:00
2026-08-31 14:35:08 +08:00
2026-08-23 09:57:12 +08:00
2026-09-01 16:13:41 +08:00
2026-08-29 16:56:56 +08:00
2026-08-29 16:56:56 +08:00
2026-08-30 15:37:38 +08:00
2026-09-01 09:49:32 +08:00
2026-08-23 09:57:12 +08:00
2026-09-01 16:49:39 +08:00
2026-09-01 16:49:39 +08:00
2026-09-01 16:49:39 +08:00
2026-08-25 20:15:08 +08:00
2026-08-04 08:33:10 +08:00
2026-08-13 23:55:30 +08:00
2026-08-05 08:15:28 +08:00
2026-08-24 11:04:23 +08:00
2026-08-28 09:16:51 +08:00
2026-08-28 09:16:51 +08:00
2026-08-24 21:27:43 +08:00
2026-08-13 23:55:30 +08:00
2026-08-23 15:43:37 +08:00
2026-08-27 09:12:37 +08:00
2026-08-30 21:25:05 +08:00
2026-09-01 16:49:39 +08:00
2026-09-01 22:04:17 +08:00
2026-09-01 16:49:39 +08:00
2026-08-20 08:57:10 +08:00