fix(security): harden process execution — shell injection + credential leak via ps aux#384

Closed

dumko2001 wants to merge 3 commits intoNVIDIA:mainfrom

dumko2001:security/harden-process-execution

Commits on Mar 18, 2026

fix(runner): safe argv execution primitives; fix opts.env overwrite
dumko2001
committed
fix(cli): replace shell-string commands with argv arrays
dumko2001
committed

Commits on Mar 19, 2026

fix(credentials): use env-lookup form for --credential; secrets never in argv
dumko2001
committed