mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
fix: harden doctor PATH checks and attribute cloud events by OS user
Doctor now verifies every installed package manager against the shim directory, and system-install validation only requires a safe parent directory. Cloud sync records username/uid on invocation context for multi-user hosts sharing one endpoint. Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
@@ -967,7 +967,7 @@ jobs:
|
||||
out=$(pmg setup doctor 2>&1 || true)
|
||||
echo "$out"
|
||||
echo "$out" | grep -q 'No aliases (system install)'
|
||||
echo "$out" | grep -Eq 'npm resolves to system shim|System shim directory is in PATH'
|
||||
echo "$out" | grep -Eq 'Package managers resolve to System shim directory|System shim directory is in PATH'
|
||||
|
||||
- name: Non-root user interception via system shims
|
||||
run: |
|
||||
|
||||
Reference in New Issue
Block a user