tegwick be3b4a2a86 Fix warden access proxy for catalog fetch commands with shell pipes. ...

resolve_fetch_command used shlex.split, which treated `|` as a literal
argument — breaking reuse-surface-hub-write-token (kubectl | base64 -d).
Piped commands now run via shell=True with inherited stdio for --fetch.

2026-07-07 16:42:26 +02:00

9.7 KiB

Raw Blame History

View Raw