Sandboxed commands can no longer read your GitLab CLI credentials.
What's wrong with this entry?
Sandboxed commands are now blocked from reading GitLab CLI credentials the way GitHub CLI ones already were.
.config/glab-cliis created and scrubbed in the home directory alongside.config/gh, and.git/glab-cliis removed by the git-scrub paths (four call sites).- The regex that flags a read as touching credentials now matches
.config/glab-cli/config.ymlnext to.config/gh/hosts.yml.
glab-cli, .config\/glab-cli\/config\.yml\b
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
macOS sandbox re-applies read and delete denials inside writable folders
Both mention sandbox
-
v2.1.236
Sandbox proxy no longer writes to sockets that have gone away
Both mention sandbox
-
v2.1.236
IPv6 hosts through the proxy
Both mention sandbox