LHMQ878andXubin Ren ec3dfb21ba fix(cli): stop leaking API keys to CLI app subprocesses ...

Installed CLI apps were started with os.environ.copy(), so provider keys
from the parent process were visible to untrusted binaries. Use a minimal
allowlist env matching the shell tool.

Fixes #4783

2026-08-12 02:57:48 +09:00

..

test_cli_subprocess_env.py

fix(cli): stop leaking API keys to CLI app subprocesses

2026-08-12 02:57:48 +09:00