- Add input validation: username regex + email format check in pipeline - Quote variables in .provision-env to prevent shell injection - Remove dead source command (each Woodpecker command is separate shell) - Use jq to build JSON payloads (prevents injection via group names) - Clean up git-crypt key on failure (use ; instead of &&) - Add Kyverno ndots lifecycle ignore to webhook-handler deployment |
||
|---|---|---|
| .. | ||
| build-cli.yml | ||
| default.yml | ||
| k8s-portal.yml | ||
| provision-user.yml | ||
| renew-tls.yml | ||