Skip to content

Conversation

jamesmoore
Copy link
Owner

Summary

  • restrict asset role to known values and strip path characters
  • add tests verifying roles cannot escape destination

Testing

  • dotnet test (fails: command not found)
  • apt-get update (403 Forbidden)

https://chatgpt.com/codex/tasks/task_e_68bfdf245470832fae54208063477b10

@jamesmoore jamesmoore merged commit d7488c8 into main Sep 10, 2025
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant