fix: quote shell interpolations in deploy and harden SSH#143

Closed

brianwtaylor wants to merge 9 commits intoNVIDIA:mainfrom

brianwtaylor:fix/deploy-shell-injection-hardening

Commits on Mar 18, 2026

fix: quote shell interpolations in deploy and harden SSH
brianwtaylor
committed
refactor: replace shell string interpolation with argv arrays in deploy
brianwtaylor
committed
test: add argv builder and GPU injection prevention tests
brianwtaylor
committed
fix: address CodeRabbit review findings on deploy hardening
brianwtaylor
committed
fix: harden runArgv against env injection and cwd override
brianwtaylor
committed
fix: throw on blocked env vars instead of silent strip
brianwtaylor
committed
docs: add JSDoc to all exported functions for docstring coverage
brianwtaylor
committed
fix: address remaining CodeRabbit review findings
brianwtaylor
committed
docs: add JSDoc docstrings for CodeRabbit coverage threshold
brianwtaylor
committed