vela exec pipeline loads all host environmental variables into pipeline

[zapplebee]

Description

With this .vela.yml

version: "1"
steps:
- name: see-env
  image: python:alpine
  commands:
  - printenv

Running vela exec pipeline will print all of the host's environmental variables.

Value

This makes running community plugins, and frankly any plugins unsafe.

Useful Information

1. What is the output of vela --version?

vela version v0.7.4

2. What operating system is being used?

MacOS Catalina 10.15.7
3. Any other important details?

n/a

[susangreve]

Thank you for opening this issue! We've added it to the backlog and will assess priority