Make env readonly and frozen in vm

pranaygp · pranaygp · commit d634802cae67 · 2025-11-07T22:45:31.000-05:00
diff --git a/.changeset/hungry-suits-brake.md b/.changeset/hungry-suits-brake.md
@@ -0,0 +1,5 @@
+---
+"@workflow/core": patch
+---
+
+Make process.env in workflow context a readonly clone
diff --git a/packages/core/src/vm/index.ts b/packages/core/src/vm/index.ts
@@ -86,7 +86,7 @@ export function createContext(options: CreateContextOptions) {
 
   // Propagate environment variables
   (g as any).process = {
-    env: process.env,
+    env: Object.freeze({ ...process.env }),
   };
 
   // Stateless + synchronous Web APIs that are made available inside the sandbox

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@workflow/core": patch
 +---
++
 +Make process.env in workflow context a readonly clone