Harden security and improve shell environment handling#286

Open

amirimatin wants to merge 18 commits into

ghantoos:pre-releasefrom

amirimatin:pre-release

Commits on Jun 15, 2026

Harden startup and shell environment handling
amirimatin
committed
docs: add security audit report highlighting vulnerabilities and remediation strategies
amirimatin
committed

Commits on Jun 17, 2026

fix: block bareword symlink path ACL bypass
amirimatin
committed
fix: block bareword symlink path ACL bypass
amirimatin
committed
Merge branch 'hotfix/path-acl-symlink-guard-release' into release
amirimatin
committed
fix: enhance path ACL checks for awk and sed commands to prevent bareword symlink bypass
amirimatin
committed
Merge release into path ACL symlink guard hotfix
amirimatin
committed
fix: harden scp parsing and child runtime environment
amirimatin
committed
fix: implement command path drift detection and resolution caching
amirimatin
committed
fix: refuse legacy SFTP passthrough by default; add sftp_unsafe_legacy option
amirimatin
committed
fix: update version to 0.12.0 in changelog, variables, and spec files
amirimatin
committed
test: normalize expectations for pinned command paths
amirimatin
committed