Harden dynamic exec arguments in experiments/dependabot paths - #52905

Merged

pelikhan merged 6 commits into

mainfrom

copilot/sighthound-fix-security-findings

Aug 15, 2026

Commits on Aug 15, 2026

Initial plan
Copilot
authored
d413d95
Harden git show args and npm lock generation

Copilot
and
pelikhan
authored
225d342
Document git tree path invariants for safe git show args

Copilot
and
pelikhan
authored
82fff2b
Merge branch 'main' into copilot/sighthound-fix-security-findings
github-actions[bot]
authored
e0cf0db
Harden experiments git ref validation for local state reads

Copilot
and
gh-aw-bot
authored
b77a1c6
Merge branch 'main' into copilot/sighthound-fix-security-findings
github-actions[bot]
authored
ea38da8