{"version":"2.1.227","anchor":"shell-commands-can-run-with-credentials-stripped-from-the-en","canonical_anchor":"shell-commands-can-run-with-credentials-stripped-from-the-en","heading":"Shell commands can run with credentials stripped from the environment","tier":"internal","area":"Shell Execution","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227\/e\/shell-commands-can-run-with-credentials-stripped-from-the-en","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.227","markdown":"### Shell commands can run with credentials stripped from the environment\n\nShell commands can run with credentials stripped from the environment, but there's no setting for it.\n\n**What**\n\nThe command builder gained an option that skips injecting the usual credential exports and instead appends a scrubbing step before the command runs. At least one internal caller uses it alongside sandboxing and cwd-change prevention. There is no user-facing setting for it.\n\n**Evidence**\n\n`scrubCredentialEnv`\n\n- Area: Shell Execution\n- Tier: Under the hood\n- Useful: 3\/5\n- Signal: 4\/5"}