Infra: block GIT_EXEC_PATH in host env sanitizer (#43685)

* Infra: block GIT_EXEC_PATH in host env sanitizer * Changelog: note host env hardening
2026-03-12 07:20:45 +00:00 · 2026-03-12 01:16:03 -04:00
parent 18f15850e6
commit 1dcef7b644
4 changed files with 60 additions and 0 deletions
--- a/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
+++ b/apps/macos/Sources/OpenClaw/HostEnvSecurityPolicy.generated.swift
@@ -17,6 +17,7 @@ enum HostEnvSecurityPolicy {
        "BASH_ENV",
        "ENV",
        "GIT_EXTERNAL_DIFF",
+        "GIT_EXEC_PATH",
        "SHELL",
        "SHELLOPTS",
        "PS4",