srojk34 1a0d7878c6 security(terminal): strip VERTEX_CREDENTIALS_PATH/GOOGLE_APPLICATION_CREDENTIALS from subprocess env ... Vertex AI authenticates via OAuth2 (service-account JSON path / ADC), not PROVIDER_REGISTRY, and VERTEX_CREDENTIALS_PATH is declared with password=False (it's a path, not a bare key) under category="provider" — a category the registry-derived blocklist loop never checks. Both it and GOOGLE_APPLICATION_CREDENTIALS (the ADC fallback the adapter also reads) fell through every existing blocklist source and leaked the on-disk location of a GCP service-account key into every spawned subprocess (terminal, codex/copilot app-server, browser workers) — the same leak class already closed for every other provider's credentials in #53503.		2026-07-01 22:05:14 +03:00
..
__init__.py	remove Vercel AI Gateway and Vercel Sandbox (#33067)	2026-05-27 00:43:32 -07:00
base.py	fix(terminal): route init_session bootstrap cd through Windows path conversion	2026-07-01 05:35:34 -07:00
daytona.py	fix(daytona): quote single-upload mkdir parent path (#54440)	2026-06-28 14:33:03 -07:00
docker.py	fix(security): strip dynamic Hermes secrets from all subprocess spawn env	2026-07-01 14:37:22 +05:30
file_sync.py	fix remote sync-back credential overwrite	2026-07-01 01:00:31 -07:00
local.py	security(terminal): strip VERTEX_CREDENTIALS_PATH/GOOGLE_APPLICATION_CREDENTIALS from subprocess env	2026-07-01 22:05:14 +03:00
managed_modal.py	feat(environments): unified spawn-per-call execution layer	2026-04-08 17:23:15 -07:00
modal.py	fix(async): close unscheduled coroutines in all threadsafe bridges (#26584)	2026-05-15 14:00:01 -07:00
modal_utils.py	fix(tools): don't compound-rewrite spawn_via_env background wrappers	2026-06-01 00:05:10 +05:30
singularity.py	fix: prevent TUI gateway stdin EOF crash across all TUI-context subprocess calls	2026-06-08 22:46:57 -07:00
ssh.py	fix(tui): preserve remote cwd for ssh sessions	2026-06-06 18:40:43 -07:00