Harden runtime service env sanitization

Co-Authored-By: Paperclip <noreply@paperclip.ing>
2026-03-28 17:39:09 -05:00
parent 11f08ea5d5
commit 84d4c328f5
2 changed files with 24 additions and 0 deletions
@@ -126,6 +126,8 @@ export function sanitizeRuntimeServiceBaseEnv(baseEnv: NodeJS.ProcessEnv): NodeJ
    }
  }
  delete env.DATABASE_URL;
+  delete env.npm_config_tailscale_auth;
+  delete env.npm_config_authenticated_private;
  return env;
 }