@geekmidas/cli

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 25 | execFileSync(process.execPath, process.argv.slice(1), { 26 | stdio: 'inherit', > 27 | env: { 28 | ...process.env, 29 | NODE_OPTIONS: `${nodeOptions} --import ${tsxPath}`.trim(),

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 424 | portEnv?: Record<string, string>, 425 | ): Record<string, string | undefined> { > 426 | return { ...process.env, ...secretsEnv, ...portEnv }; 427 | } 428 |

Spreading entire process.env into an object — may capture all secrets 162 | cwd: buildCwd, 163 | stdio: 'inherit', > 164 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 165 | }); 166 | logger.log(`✅ Image built: ${imageRef}`);

Spreading entire process.env into an object — may capture all secrets 302 | cwd: resolve(workspacePath, appPath), 303 | stdio: ['ignore', 'pipe', 'pipe'], > 304 | env: { 305 | ...process.env, 306 | // Ensure tsx is available for TypeScript entry files

Spreading entire process.env into an object — may capture all secrets 400 | cwd: fullAppPath, 401 | stdio: ['ignore', 'pipe', 'pipe'], > 402 | env: { 403 | ...process.env, 404 | },

Spreading entire process.env into an object — may capture all secrets 1021 | // Prepare environment variables 1022 | // Order matters: secrets first, then dependencies (dependencies can override) > 1023 | const turboEnv: Record<string, string> = { 1024 | ...process.env, 1025 | ...secretsEnv,

Spreading entire process.env into an object — may capture all secrets 1265 | private async runProcess(): Promise<void> { 1266 | // Pass PORT as environment variable > 1267 | const env = { ...process.env, PORT: String(this.port) }; 1268 | 1269 | this.childProcess = spawn('npx', ['tsx', this.wrapperPath], {

Spreading entire process.env into an object — may capture all secrets 1477 | { 1478 | stdio: 'inherit', > 1479 | env: { ...process.env, NODE_ENV: 'development' }, 1480 | detached: true, 1481 | },

Spreading entire process.env into an object — may capture all secrets 291 | cwd, 292 | stdio: 'inherit', > 293 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 294 | }, 295 | );

Spreading entire process.env into an object — may capture all secrets 97 | cwd, 98 | stdio: 'inherit', > 99 | env: { 100 | ...process.env, 101 | ...credentials, // Inject secrets as env vars

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 1028 | // Prepare environment variables 1029 | // Order matters: secrets first, then dependencies (dependencies can override) > 1030 | const turboEnv: Record<string, string> = { 1031 | ...process.env, 1032 | ...secretsEnv,

Spreading entire process.env into an object — may capture all secrets 1494 | private async runProcess(): Promise<void> { 1495 | // Pass PORT as environment variable > 1496 | const env = { ...process.env, PORT: String(this.port) }; 1497 | 1498 | this.childProcess = spawn('npx', ['tsx', this.wrapperPath], {

Spreading entire process.env into an object — may capture all secrets 1620 | { 1621 | stdio: 'inherit', > 1622 | env: { ...process.env, NODE_ENV: 'development' }, 1623 | detached: true, 1624 | },

Spreading entire process.env into an object — may capture all secrets 290 | cwd, 291 | stdio: 'inherit', > 292 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 293 | }, 294 | );

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 906 | // Prepare environment variables 907 | // Order matters: secrets first, then dependencies (dependencies can override) > 908 | const turboEnv: Record<string, string> = { 909 | ...process.env, 910 | ...secretsEnv,

Spreading entire process.env into an object — may capture all secrets 1191 | { 1192 | stdio: 'inherit', > 1193 | env: { ...process.env, NODE_ENV: 'development' }, 1194 | detached: true, 1195 | },

Spreading entire process.env into an object — may capture all secrets 290 | cwd, 291 | stdio: 'inherit', > 292 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 293 | }, 294 | );

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 906 | // Prepare environment variables 907 | // Order matters: secrets first, then dependencies (dependencies can override) > 908 | const turboEnv: Record<string, string> = { 909 | ...process.env, 910 | ...secretsEnv,

Spreading entire process.env into an object — may capture all secrets 1191 | { 1192 | stdio: 'inherit', > 1193 | env: { ...process.env, NODE_ENV: 'development' }, 1194 | detached: true, 1195 | },

Spreading entire process.env into an object — may capture all secrets 290 | cwd, 291 | stdio: 'inherit', > 292 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 293 | }, 294 | );

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 906 | // Prepare environment variables 907 | // Order matters: secrets first, then dependencies (dependencies can override) > 908 | const turboEnv: Record<string, string> = { 909 | ...process.env, 910 | ...secretsEnv,

Spreading entire process.env into an object — may capture all secrets 1191 | { 1192 | stdio: 'inherit', > 1193 | env: { ...process.env, NODE_ENV: 'development' }, 1194 | detached: true, 1195 | },

Spreading entire process.env into an object — may capture all secrets 290 | cwd, 291 | stdio: 'inherit', > 292 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 293 | }, 294 | );

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 273 | cwd, 274 | stdio: 'inherit', > 275 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 276 | }, 277 | );

Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 273 | cwd, 274 | stdio: 'inherit', > 275 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 276 | }, 277 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 273 | cwd, 274 | stdio: 'inherit', > 275 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 276 | }, 277 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 133 | cwd: buildCwd, 134 | stdio: 'inherit', > 135 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 136 | }, 137 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 273 | cwd, 274 | stdio: 'inherit', > 275 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 276 | }, 277 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 73 | cwd: buildCwd, 74 | stdio: 'inherit', > 75 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 76 | }, 77 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 273 | cwd, 274 | stdio: 'inherit', > 275 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 276 | }, 277 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 44 | cwd: process.cwd(), 45 | stdio: 'inherit', > 46 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 47 | }, 48 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 186 | cwd: process.cwd(), 187 | stdio: 'inherit', > 188 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 189 | }, 190 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 44 | cwd: process.cwd(), 45 | stdio: 'inherit', > 46 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 47 | }, 48 | );

Spreading entire process.env into an object — may capture all secrets 611 | { 612 | stdio: 'inherit', > 613 | env: { ...process.env, NODE_ENV: 'development' }, 614 | detached: true, 615 | },

Spreading entire process.env into an object — may capture all secrets 186 | cwd: process.cwd(), 187 | stdio: 'inherit', > 188 | env: { ...process.env, DOCKER_BUILDKIT: '1' }, 189 | }, 190 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 565 | { 566 | stdio: 'inherit', > 567 | env: { ...process.env, NODE_ENV: 'development' }, 568 | detached: true, 569 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 557 | { 558 | stdio: 'inherit', > 559 | env: { ...process.env, NODE_ENV: 'development' }, 560 | detached: true, 561 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 541 | { 542 | stdio: 'inherit', > 543 | env: { ...process.env, NODE_ENV: 'development' }, 544 | detached: true, 545 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 489 | { 490 | stdio: 'inherit', > 491 | env: { ...process.env, NODE_ENV: 'development' }, 492 | detached: true, 493 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 431 | { 432 | stdio: 'inherit', > 433 | env: { ...process.env, NODE_ENV: 'development' }, 434 | detached: true, 435 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 431 | { 432 | stdio: 'inherit', > 433 | env: { ...process.env, NODE_ENV: 'development' }, 434 | detached: true, 435 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 431 | { 432 | stdio: 'inherit', > 433 | env: { ...process.env, NODE_ENV: 'development' }, 434 | detached: true, 435 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 413 | { 414 | stdio: 'inherit', > 415 | env: { ...process.env, NODE_ENV: 'development' }, 416 | detached: true, 417 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 7 | describe('loadEnvFiles', () => { 8 | let testDir: string; > 9 | const originalEnv = { ...process.env }; 10 | 11 | beforeEach(() => {

Spreading entire process.env into an object — may capture all secrets 413 | { 414 | stdio: 'inherit', > 415 | env: { ...process.env, NODE_ENV: 'development' }, 416 | detached: true, 417 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 353 | { 354 | stdio: 'inherit', > 355 | env: { ...process.env, NODE_ENV: 'development' }, 356 | detached: true, 357 | },

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 266 | { 267 | stdio: 'inherit', > 268 | env: { ...process.env, NODE_ENV: 'development' }, 269 | }, 270 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.

Spreading entire process.env into an object — may capture all secrets 266 | { 267 | stdio: 'inherit', > 268 | env: { ...process.env, NODE_ENV: 'development' }, 269 | }, 270 | );

Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.