Skip to main content

scrubbed_env

speccoder_runtime::verify::process

Function scrubbed_env 

Source 
pub fn scrubbed_env(
    vars: impl IntoIterator<Item = (String, String)>,
) -> Vec<(String, String)>
Expand description

The child environment: everything except secret-looking variables, plus CI=1 and GIT_TERMINAL_PROMPT=0. Not a security boundary — that is the OS sandbox (crate::sandbox).