NVIDIA / holodeck / 22712907904

49%

main: 49%

push

github

fix(validate): add env var key validation and fix path traversal check (#565)

Address review feedback on PR #703:
- R1: Validate env var keys against [a-zA-Z_][a-zA-Z0-9_]* to prevent
  command injection via export statements in the executor
- R2: Check for ".." as a path component (split on "/") instead of
  substring match, allowing legitimate filenames like "foo..bar.sh"

Signed-off-by: Carlos Eduardo Arango Gutierrez <eduardoa@nvidia.com>

8 of 8 new or added lines in 1 file covered. (100.0%)

2717 of 5551 relevant lines covered (48.95%)

0.55 hits per line