Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion sh/shared/github-auth.sh
Original file line number Diff line number Diff line change
Expand Up @@ -39,7 +39,7 @@ _install_gh_brew() {

# Install gh via APT with GitHub's official repository (Debian/Ubuntu)
_install_gh_apt() {
# Use sudo only when not already root (Fly.io containers run as root)
# Use sudo only when not already root (some cloud containers run as root)
local SUDO=""
if [[ "$(id -u)" -ne 0 ]]; then SUDO="sudo"; fi

Expand Down
4 changes: 2 additions & 2 deletions sh/shared/key-request.sh
Original file line number Diff line number Diff line change
Expand Up @@ -121,8 +121,8 @@ process.stdout.write(d[process.env._VAR] || d.api_key || d.token || '');
# downstream in unquoted expansions, eval contexts, or logging
# Allow alphanumeric plus safe chars needed by real tokens:
# - _ . / @ (standard API key chars)
# : + = (base64 segments, URL-style formats)
# space (Fly.io "FlyV1 <macaroon>" prefixed tokens)
# : + = (base64 segments, URL-safe and base64 formats)
# space (prefixed token formats, e.g., "Bearer <token>")
# Must match CLI's loadTokenFromConfig regex in cli/src/digitalocean/digitalocean.ts
if [[ ! "${val}" =~ ^[a-zA-Z0-9._/@:+=\ -]+$ ]]; then
log "SECURITY: Invalid characters in config value for ${var_name}"
Expand Down