🔒 [security fix] Inject NEXTAUTH_SECRET, SALT, and ENCRYPTION_KEY via env to avoid hardcoding#101

Merged

sheepdestroyer merged 8 commits into

jules-9740168748720773324-8a1008bb

Jun 30, 2026

Commits on Jun 24, 2026

🔒 [security fix] Inject NEXTAUTH_SECRET, SALT, and ENCRYPTION_KEY via env to avoid hardcoding

google-labs-jules[bot]
and
sheepdestroyer
committed

Commits on Jun 30, 2026

Merge branch 'master' into jules-9740168748720773324-8a1008bb
sheepdestroyer
authored
Address review feedback: add openssl check and secure .env permissions

google-labs-jules[bot]
and
sheepdestroyer
committed
Resolve merge conflicts and update start-stack.sh with review feedback

google-labs-jules[bot]
and
sheepdestroyer
committed
Fix sourcery blocking security issue: subprocess command injection in get_pr_status.py

google-labs-jules[bot]
and
sheepdestroyer
committed
Address feedback: guard test_agy_tiers.py continuation runs and fix f-strings

google-labs-jules[bot]
and
sheepdestroyer
committed
Address feedback: bound extra annotation data in API payloads

google-labs-jules[bot]
and
sheepdestroyer
committed
Merge master changes & resolve conflicts
sheepdestroyer
committed