fix(secret-guard): expand variables and close glob bypasses - #1196

Open

TheGreatAxios wants to merge 11 commits into

mainfrom

cl-8999-secret-guard-dollar

Commits on Sep 28, 2026

fix(secret-guard): expand shell variables before secret matching
TheGreatAxios
committed
aaa897c
fix(secret-guard): close ?/[] glob bypass, resolve :=/:+ over-prompt
TheGreatAxios
committed
5509622
test(secret-guard): add CL-8999 ordering keepers for glob and device-path legs
TheGreatAxios
committed
a7b5d28
fix(secret-guard): narrow ?/[] to file operands, prompt .* globs
TheGreatAxios
committed
bb8e006
fix(secret-guard): keep file URLs behind glob guard
TheGreatAxios
committed
39da002
fix(secret-guard): decode local file URL paths
TheGreatAxios
committed
c428e02
fix(secret-guard): prompt on local file URL brace globs
TheGreatAxios
committed
d2ceee8
fix(secret-guard): detect brace-synthesized file URLs
TheGreatAxios
committed
3a58cf0
fix(secret-guard): classify remote URL glob schemes
TheGreatAxios
committed
7980a30
fix(secret-guard): inspect curl default file protocol
TheGreatAxios
committed
4c5b55a
fix(secret-guard): accept leading-zero curl range steps
TheGreatAxios
committed
02076cb