Files
hermes-agent/agent
Teknium 6f228fa0fd fix(security): add .config/gh to read protection for @file references
Follow-up to PR #4305 — .config/gh was added to the write-deny list
but missed from _SENSITIVE_HOME_DIRS, leaving GitHub CLI OAuth tokens
exposed via @file:~/.config/gh/hosts.yml context injection.
2026-03-31 12:48:05 -07:00
..