cleveragents/cleveragents-core

fix(security): fix file_tools.py validate_path startswith bypass #7478 #7801

Merged

HAL9000 merged 2 commits from fix/issue-7478-validate-path-startswith into master

2026-05-15 00:54:22 +00:00

Author	SHA1	Message	Date
HAL9000	ef6829b6f8	chore(lint): remove unused pathlib.Path import in llm_actors.py CI / benchmark-publish (push) Has started running Details CI / helm (push) Successful in 40s Details CI / push-validation (push) Successful in 39s Details CI / benchmark-regression (push) Failing after 49s Details CI / build (push) Successful in 1m12s Details CI / lint (push) Successful in 1m29s Details CI / quality (push) Successful in 1m35s Details CI / typecheck (push) Successful in 1m44s Details CI / security (push) Successful in 2m4s Details CI / e2e_tests (push) Successful in 52s Details CI / integration_tests (push) Successful in 5m23s Details CI / unit_tests (push) Successful in 6m25s Details CI / docker (push) Successful in 1m39s Details CI / coverage (push) Successful in 11m21s Details CI / status-check (push) Successful in 7s Details CI / lint (pull_request) Successful in 1m45s Details CI / quality (pull_request) Successful in 1m41s Details CI / security (pull_request) Successful in 2m19s Details CI / typecheck (pull_request) Successful in 2m46s Details CI / build (pull_request) Successful in 38s Details CI / helm (pull_request) Successful in 38s Details CI / push-validation (pull_request) Successful in 25s Details CI / integration_tests (pull_request) Successful in 3m58s Details CI / unit_tests (pull_request) Successful in 7m35s Details CI / docker (pull_request) Successful in 1m55s Details CI / coverage (pull_request) Successful in 15m21s Details CI / status-check (pull_request) Successful in 10s Details	2026-05-15 00:34:30 +00:00
HAL9000	a37b4e0ccb	fix(security): use relpath containment instead of startswith to prevent prefix-collision bypass CI / quality (pull_request) Successful in 1m29s Details CI / integration_tests (pull_request) Failing after 1m27s Details CI / typecheck (pull_request) Failing after 1m42s Details CI / lint (pull_request) Failing after 1m45s Details CI / security (pull_request) Failing after 1m45s Details CI / build (pull_request) Successful in 32s Details CI / helm (pull_request) Successful in 38s Details CI / unit_tests (pull_request) Failing after 2m29s Details CI / coverage (pull_request) Has been skipped Details CI / docker (pull_request) Has been skipped Details CI / push-validation (pull_request) Successful in 32s Details CI / status-check (pull_request) Failing after 5s Details	2026-05-14 23:59:01 +00:00