@plugjs/plug
Supply chain provenance
Status for the latest visible version.
Maintainers
Keywords
Accepted risks
Findings the reviewer chose to accept rather than block on.
| Source | Rule | Reason | Accepted by | When |
|---|---|---|---|---|
| semgrep | semgrep:env-spread | AI (semgrep): Build tool fork runner intentionally propagates process.env to child processes; stable pattern for this package. | ai | |
| typosquat | typosquat.levenshtein:pg | AI (typosquat): Scoped build framework @plugjs/plug; no resemblance to pg (postgres client) in purpose or namespace. | ai | |
| phantom-deps | phantom-dep:@types/node | AI (phantom-deps): @types/node is a type-only dep used at compile time; not imported at runtime by convention. | ai |
Versions (showing 65 of 65)
| Version | Deps | Published |
|---|---|---|
| 0.6.110 | 5 / 1 | |
| 0.6.109 | 5 / 1 | |
| 0.6.108 | 5 / 1 | |
| 0.6.107 | 5 / 1 | |
| 0.6.106 | 5 / 1 | |
| 0.6.105 | 5 / 1 | |
| 0.6.104 | 5 / 1 | |
| 0.6.103 | 5 / 1 | |
| 0.6.102 | 5 / 1 | |
| 0.6.101 | 5 / 1 | |
| 0.6.100 | 5 / 1 | |
| 0.6.99 | 5 / 1 | |
| 0.6.98 | 5 / 1 | |
| 0.6.97 | 5 / 1 | |
| 0.6.96 | 5 / 1 | |
| 0.6.95 | 5 / 1 | |
| 0.6.94 | 5 / 1 | |
| 0.6.93 | 5 / 1 | |
| 0.6.92 | 5 / 1 | |
| 0.6.91 | 5 / 1 | |
| 0.6.90 | 5 / 1 | |
| 0.6.89 | 5 / 1 | |
| 0.6.88 | 5 / 1 | |
| 0.6.87 | 5 / 1 | |
| 0.6.86 | 5 / 1 | |
| 0.6.85 | 5 / 1 | |
| 0.6.84 | 5 / 1 | |
| 0.6.83 | 5 / 1 | |
| 0.6.82 | 5 / 1 | |
| 0.6.81 | 5 / 1 | |
| 0.6.80 | 5 / 1 | |
| 0.6.79 | 5 / 1 | |
| 0.6.78 | 5 / 1 | |
| 0.6.77 | 5 / 1 | |
| 0.6.76 | 5 / 1 | |
| 0.6.75 | 5 / 1 | |
| 0.6.74 | 5 / 1 | |
| 0.6.73 | 5 / 1 | |
| 0.6.72 | 5 / 1 | |
| 0.6.71 | 5 / 1 | |
| 0.6.70 | 5 / 1 | |
| 0.6.69 | 5 / 1 | |
| 0.6.68 | 5 / 1 | |
| 0.6.67 | 5 / 1 | |
| 0.6.66 | 5 / 1 | |
| 0.6.65 | 5 / 1 | |
| 0.6.64 | 5 / 1 | |
| 0.6.63 | 5 / 1 | |
| 0.6.62 | 5 / 1 | |
| 0.6.61 | 5 / 1 | |
| 0.6.60 | 5 / 1 | |
| 0.6.59 | 5 / 1 | |
| 0.6.58 | 5 / 1 | |
| 0.6.57 | 5 / 1 | |
| 0.6.56 | 5 / 1 | |
| 0.6.55 | 5 / 1 | |
| 0.6.54 | 5 / 1 | |
| 0.6.53 | 5 / 1 | |
| 0.6.52 | 5 / 1 | |
| 0.6.51 | 5 / 1 | |
| 0.6.50 | 5 / 1 | |
| 0.6.49 | 5 / 1 | |
| 0.6.48 | 5 / 1 | |
| 0.6.47 | 5 / 1 | |
| 0.6.46 | 5 / 1 |
v0.6.110
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.109
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.108
1 findingPublished via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.107
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/848e60dd1c8fdb2bac033966d61c3d6b998c1923/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/848e60dd1c8fdb2bac033966d61c3d6b998c1923/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.106
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2a4417c7d108337e4620a55eabbf31f14908b1c3/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2a4417c7d108337e4620a55eabbf31f14908b1c3/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.105
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b447e5ef175c8b317b5fb13480542414ebfab5dd/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b447e5ef175c8b317b5fb13480542414ebfab5dd/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.104
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/97e9016001eb82726f5a4c4c75d452bdd933d40c/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/97e9016001eb82726f5a4c4c75d452bdd933d40c/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.103
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3305a1e5f772d6d32dc7215c153f3094307e4179/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3305a1e5f772d6d32dc7215c153f3094307e4179/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.102
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/8a0e9be700ce355bfe6e4b921f554bed123343e9/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/8a0e9be700ce355bfe6e4b921f554bed123343e9/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.101
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/a8d60ac17ac41f4ba1be8b2c6c13a3d17355c8a0/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/a8d60ac17ac41f4ba1be8b2c6c13a3d17355c8a0/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.100
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2254a4cc6760ad994152748fd675f662a00d267d/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2254a4cc6760ad994152748fd675f662a00d267d/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.99
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c3e5ff16c16a7f9c61a3c60e2c9270d5ab44aa19/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c3e5ff16c16a7f9c61a3c60e2c9270d5ab44aa19/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.98
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e69cd390438eff09137266515e9f9b5fdb13a224/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e69cd390438eff09137266515e9f9b5fdb13a224/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.97
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/30529029c5cba33503a2dd50baf5f58bc2023ace/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/30529029c5cba33503a2dd50baf5f58bc2023ace/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.96
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2773016cc493db50fb0522841a6b20807b731f1c/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/2773016cc493db50fb0522841a6b20807b731f1c/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.95
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/4fd5fd7776f50888c65cc72ef0db89cf88249688/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/4fd5fd7776f50888c65cc72ef0db89cf88249688/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.94
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/fffcb4b8ccb0ca035e2f6fe576b85ce1c74002aa/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/fffcb4b8ccb0ca035e2f6fe576b85ce1c74002aa/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.93
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e96b80a53859c3593dcf366d28fd293103c88cb6/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e96b80a53859c3593dcf366d28fd293103c88cb6/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.92
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e1f9f85dcb706e2ead224a076aef2b86b4860753/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e1f9f85dcb706e2ead224a076aef2b86b4860753/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.91
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/18bc1322de264a7f53a38a9592044e95fb7babaf/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/18bc1322de264a7f53a38a9592044e95fb7babaf/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.90
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/967aff3324abce7fccec67be0eb2c5b33c3b9cd6/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/967aff3324abce7fccec67be0eb2c5b33c3b9cd6/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.89
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ea4285acb4cb31d37e2865e9067e8e6aaad5ba77/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ea4285acb4cb31d37e2865e9067e8e6aaad5ba77/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.88
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c1706d814d366a10227b87eec5465f55ce987cf7/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c1706d814d366a10227b87eec5465f55ce987cf7/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.87
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/88c1331fd50e7a6576da98566864547ec591753d/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/88c1331fd50e7a6576da98566864547ec591753d/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.86
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/26a6e0de9a3e0b64a068d7cdf7eba8df26115010/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/26a6e0de9a3e0b64a068d7cdf7eba8df26115010/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.85
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/7cc186fcfa5663dc81ada51fe8ee222783f7efb0/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/7cc186fcfa5663dc81ada51fe8ee222783f7efb0/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.84
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3d258ba6ff56ded84a4f5299dbcc4ad2b9a86e6d/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3d258ba6ff56ded84a4f5299dbcc4ad2b9a86e6d/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Published via CI/CD with Sigstore attestation (predicate: https://slsa.dev/provenance/v1). This is the strongest supply chain integrity signal.
v0.6.83
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5dc4c59d7b3d97b8d7657157dde5822fb223a8ba/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5dc4c59d7b3d97b8d7657157dde5822fb223a8ba/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.82
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/9a04249cd878efaf1344fbaf8f4a839c31bf384d/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/9a04249cd878efaf1344fbaf8f4a839c31bf384d/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.81
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/9d03928a29b3b2826e167aade472044de40c8572/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/9d03928a29b3b2826e167aade472044de40c8572/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.80
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/356bdf3cab81d9f290fedccc5e8721d12b10da6a/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/356bdf3cab81d9f290fedccc5e8721d12b10da6a/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.79
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c07cf5a42d4fcc18da2b3946817e245da06e5842/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c07cf5a42d4fcc18da2b3946817e245da06e5842/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.78
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/558cddf8d6f2111cfad17d141d6742659bf9e5d7/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/558cddf8d6f2111cfad17d141d6742659bf9e5d7/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.77
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/f060150aaa65c0bec363d53ce125934d5e6948f0/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/f060150aaa65c0bec363d53ce125934d5e6948f0/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.76
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/13e9f2b3fcf76e8ddf99b93ea64114dbf1948f15/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/13e9f2b3fcf76e8ddf99b93ea64114dbf1948f15/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.75
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c6a736df12a95444783b733862146aa74aeddf0c/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c6a736df12a95444783b733862146aa74aeddf0c/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.74
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/feb4bfd916e3f95d4cf88fec3bfd947c2003c00f/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/feb4bfd916e3f95d4cf88fec3bfd947c2003c00f/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.73
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/38346c73481e0356b370d553ce3956508b7a1634/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/38346c73481e0356b370d553ce3956508b7a1634/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.72
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0ad681eaae622797f3b0dc5aab621fc1585e845e/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0ad681eaae622797f3b0dc5aab621fc1585e845e/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.71
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c809c7f4fd25edbc3ae1849bc39e4176390db283/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/c809c7f4fd25edbc3ae1849bc39e4176390db283/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.70
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3525c0ed44e26bb23f5168d6c25f6f0b6eac4db1/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3525c0ed44e26bb23f5168d6c25f6f0b6eac4db1/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.69
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b2d2448e46f0c710ffa7876ae6d7eb6ef16e64c4/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b2d2448e46f0c710ffa7876ae6d7eb6ef16e64c4/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.68
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ff1180e8bde2cc1f060a0ffa02ec71a7f501eba7/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ff1180e8bde2cc1f060a0ffa02ec71a7f501eba7/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.67
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/43e32ffaf5fd9500fcdb0e2c8a9b6cd87ce577ea/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/43e32ffaf5fd9500fcdb0e2c8a9b6cd87ce577ea/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.66
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5dc08e9eadd5d2396dac1e8afce56eff5135f798/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5dc08e9eadd5d2396dac1e8afce56eff5135f798/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.65
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/d0320a42ca31ff628d2b1c5162ddac452a331796/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/d0320a42ca31ff628d2b1c5162ddac452a331796/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.64
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/852c82a93d4f874c41bb366624d4ea969f7c86f2/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/852c82a93d4f874c41bb366624d4ea969f7c86f2/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.63
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/756bd9760dce7f69ce19a93e43c05be144b7c42d/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/756bd9760dce7f69ce19a93e43c05be144b7c42d/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.62
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/7f4ef376d8c51a36f7da527e10f77adcd7a4140b/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/7f4ef376d8c51a36f7da527e10f77adcd7a4140b/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.61
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e4e8ecd27593970e7105ec30178fcffa0a587df4/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/e4e8ecd27593970e7105ec30178fcffa0a587df4/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.60
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/80fb592f89dbecc7766ea655bf9f94faf3619e71/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/80fb592f89dbecc7766ea655bf9f94faf3619e71/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.59
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0832d9e9ba3348e21a1a432deb10365ba82bc3cc/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0832d9e9ba3348e21a1a432deb10365ba82bc3cc/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.58
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/bd74a663a50bfb8b0386cffa1479099295883708/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/bd74a663a50bfb8b0386cffa1479099295883708/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.57
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0916af51f19abd52468545c8edb1d7f3fdccd8d1/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/0916af51f19abd52468545c8edb1d7f3fdccd8d1/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.56
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/65f1d3ba18e2e45ec75564f3a2acf05a3ae896c6/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/65f1d3ba18e2e45ec75564f3a2acf05a3ae896c6/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.55
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ef2b0cb0392c5f5d7d5ccd16bb65eee2f4db1b9b/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ef2b0cb0392c5f5d7d5ccd16bb65eee2f4db1b9b/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.54
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ce37d3bef67689946ca6844d079e5bc080028602/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/ce37d3bef67689946ca6844d079e5bc080028602/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.53
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/f0f4d2f3b23ec8bd30275c390bf768f5d2573947/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/f0f4d2f3b23ec8bd30275c390bf768f5d2573947/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.52
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/10a71c095b73a66be6d19da34d1b8b0bcc2de555/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/10a71c095b73a66be6d19da34d1b8b0bcc2de555/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.51
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b4fa05f173e2c3f81cc2da4107ac2a9aeb53a4c3/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/b4fa05f173e2c3f81cc2da4107ac2a9aeb53a4c3/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.50
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/238589ddec4d4f6d1bee020d44f095b385ec3141/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/238589ddec4d4f6d1bee020d44f095b385ec3141/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.49
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/adac0ed4125566d8e8685b7fa9b0369a4e6f9a3e/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/adac0ed4125566d8e8685b7fa9b0369a4e6f9a3e/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.48
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5bd1e92ee580bb1b0482874d8d2c9a14bff42f4e/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/5bd1e92ee580bb1b0482874d8d2c9a14bff42f4e/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.47
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/607cdd525fd85a163af32775e2df8a154ae37a5b/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/607cdd525fd85a163af32775e2df8a154ae37a5b/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.
v0.6.46
3 findingsSpreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3fe69cf8746a55c1025fce630b707d8cba73bcf5/src/fork.ts#L86 84 | 85 | /* Environment variables */ > 86 | const env = { ...process.env, ...logOptions.forkEnv(context.taskName) } 87 | 88 | /* Check our args (reversed) to see if the last specifies `coverageDir` */
Spreading entire process.env into an object — may capture all secrets Source: ssh://[email protected]/plugjs/plug/blob/3fe69cf8746a55c1025fce630b707d8cba73bcf5/src/utils/exec.ts#L59 57 | // Build our environment variables record 58 | const PATH = childPaths.join(path.delimiter) > 59 | const childEnv: Record<string, string> = { 60 | ...process.env, // environment from current running process 61 | ...env, // environment configured from "execChild" arguments
Package was published without Sigstore provenance. Only ~12% of npm packages have provenance, so this is common but not ideal.