Skip to content

fix: potential command injection, shell injection, path traversal, and secret logging#2139

Merged
graphite-app[bot] merged 1 commit intomainfrom
01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging
Jan 28, 2026
Merged

fix: potential command injection, shell injection, path traversal, and secret logging#2139
graphite-app[bot] merged 1 commit intomainfrom
01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging

Conversation

@kristina-solovyova
Copy link
Collaborator

@kristina-solovyova kristina-solovyova commented Jan 28, 2026

No description provided.

@kristina-solovyova kristina-solovyova marked this pull request as ready for review January 28, 2026 12:35
@kristina-solovyova kristina-solovyova requested a review from a team as a code owner January 28, 2026 12:35
@kristina-solovyova Graphite App
Copy link
Collaborator Author

kristina-solovyova commented Jan 28, 2026 •
edited
Loading

How to use the Graphite Merge Queue

Add the label main-merge-queue to this PR to add it to the merge queue.

You must have a Graphite account in order to use the merge queue. Sign up using this link.

An organization admin has required the Graphite Merge Queue in this repository.

Please do not merge from GitHub as this will restart CI on PRs being processed by the merge queue.

This stack of pull requests is managed by Graphite. Learn more about stacking.

@graphite-app graphite-app bot requested review from assafgi and tigrawap January 28, 2026 12:35
github-advanced-security[bot]
github-advanced-security bot found potential problems Jan 28, 2026
View reviewed changes
github-advanced-security[bot]
github-advanced-security bot found potential problems Jan 28, 2026
View reviewed changes
@graphite-app
Copy link

graphite-app bot commented Jan 28, 2026

Graphite Automations

"Add anton/matt/sergey/kristina as reviwers on operator PRs" took an action on this PR • (01/28/26)

2 reviewers were added to this PR based on Anton Bykov's automation.

@kristina-solovyova kristina-solovyova force-pushed the 01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging branch 5 times, most recently from dce2463 to ac689b2 Compare January 28, 2026 13:00
@kristina-solovyova kristina-solovyova changed the title fix: potantial command injection, shell injection, path traversal, and secret logging fix: potential command injection, shell injection, path traversal, and secret logging Jan 28, 2026
github-advanced-security[bot]
github-advanced-security bot found potential problems Jan 28, 2026
View reviewed changes
@kristina-solovyova kristina-solovyova force-pushed the 01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging branch from ac689b2 to 205dd03 Compare January 28, 2026 13:07
@graphite-app
Copy link

graphite-app bot commented Jan 28, 2026 •
edited
Loading

Merge activity

  • Jan 28, 1:11 PM UTC: kristina-solovyova added this pull request to the Graphite merge queue.
  • Jan 28, 1:12 PM UTC: CI is running for this pull request on a draft pull request (#2140) due to your merge queue CI optimization settings.
  • Jan 28, 1:40 PM UTC: The Graphite merge queue couldn't merge this PR because it was not satisfying all requirements (Failed CI (ci_on_merge_queue_required_status)).
  • Jan 28, 1:50 PM UTC: kristina-solovyova added this pull request to the Graphite merge queue.
  • Jan 28, 1:50 PM UTC: CI is running for this pull request on a draft pull request (#2142) due to your merge queue CI optimization settings.
  • Jan 28, 1:52 PM UTC: The Graphite merge queue couldn't merge this PR because it was not satisfying all requirements (Failed CI (ci_on_merge_queue_required_status)).
  • Jan 28, 3:12 PM UTC: kristina-solovyova added this pull request to the Graphite merge queue.
  • Jan 28, 3:12 PM UTC: kristina-solovyova removed this pull request from the Graphite merge queue.
  • Jan 28, 3:12 PM UTC: CI is running for this pull request on a draft pull request (#2144) due to your merge queue CI optimization settings.
  • Jan 28, 3:12 PM UTC: kristina-solovyova removed this pull request from the Graphite merge queue.
  • Jan 28, 3:15 PM UTC: kristina-solovyova added this pull request to the Graphite merge queue.
  • Jan 28, 3:15 PM UTC: CI is running for this pull request on a draft pull request (#2145) due to your merge queue CI optimization settings.
  • Jan 28, 4:07 PM UTC: Merged by the Graphite merge queue via draft PR: #2145.

@kristina-solovyova kristina-solovyova mentioned this pull request Jan 28, 2026
Merged
@kristina-solovyova kristina-solovyova added the skip_ci_on_merge_queue_plan Skip running upgrade-extended test with/without AI hooks label Jan 28, 2026 — with Graphite App
@kristina-solovyova kristina-solovyova removed the skip_ci_on_merge_queue_plan Skip running upgrade-extended test with/without AI hooks label Jan 28, 2026
@kristina-solovyova kristina-solovyova force-pushed the 01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging branch from 205dd03 to e8b1caa Compare January 28, 2026 14:20
This was referenced Jan 28, 2026
Merged
Open
@graphite-app graphite-app bot merged commit e8b1caa into main Jan 28, 2026
17 checks passed
@graphite-app graphite-app bot deleted the 01-28-fix_potantial_command_injection_shell_injection_path_traversal_and_secret_logging branch January 28, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@tigrawap tigrawap tigrawap approved these changes

@assafgi assafgi Awaiting requested review from assafgi

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@kristina-solovyova @tigrawap