Skip to content

fix(init): run commands without shell to eliminate injection surface #3029

fix(init): run commands without shell to eliminate injection surface

fix(init): run commands without shell to eliminate injection surface #3029

Triggered via pull request April 6, 2026 14:19
Status Success
Total duration 4m 39s
Artifacts 6

ci.yml

on: pull_request
Detect Changes
6s
Detect Changes
Lint & Typecheck
28s
Lint & Typecheck
Check skill files
9s
Check skill files
Eval SKILL.md
2m 9s
Eval SKILL.md
Build Docs
18s
Build Docs
Matrix: build-binary
Matrix: build-npm
Generate Delta Patches
0s
Generate Delta Patches
E2E Tests
42s
E2E Tests
Publish Nightly to GHCR
0s
Publish Nightly to GHCR
CI Status
4s
CI Status
Fit to window
Zoom out
Zoom in

Artifacts

Produced during runtime
Name Size Digest
codecov-coverage-results-fix-init-no-shell-spawn-test-unit
161 KB
sha256:9ec9cf4cd0dc27a79899b4297d3f7ea3615b898f74e5b0129d940330206d288e
codecov-test-results-fix-init-no-shell-spawn-test-unit
227 Bytes
sha256:f77f269b0cb49b97bbeceeb1a2af9234f3673df7a9901591342c953f085a427c
gh-pages
1.78 MB
sha256:bfcd926dfec77992c24fb979e46c86dfd8ed07a06f072fac5112514c67ecd683
npm-package
882 KB
sha256:ed45fb9c9c2f1ebb82c206e511ba1900a69bf690275c80803fa8fe82eab06590
sentry-linux-x64
28.9 MB
sha256:9a1133268c6d17e99acd04e61370ebddcfa3853fdba8ae213d2190b668ddfaf6
skill-eval-results
5.67 KB
sha256:7d6f6dcb3c968d9a5c5d82a845d65aa667cb22c86ff637e6c22ec6264e977f1c