pub fn scrubbed_env(
vars: impl IntoIterator<Item = (String, String)>,
) -> Vec<(String, String)>Expand description
The child environment: everything except secret-looking variables and
build-output redirections, plus CI=1 and GIT_TERMINAL_PROMPT=0. Not a security boundary — that is
the OS sandbox (crate::sandbox).