mirror of
https://github.com/safedep/pmg.git
synced 2026-08-03 07:24:09 +02:00
Abhisek DattaandGitHub
c7244f921a
* feat: Add support for environment variable protection for sandbox * chore: Update dangerous env var list * fix: Split profiles for improved environment protection * fix: pipx sandbox profile separation * chore: Show sandbox scrub info on error exit * fix: Code review fixes * test: Add e2e for sandbox environment scrubbing
18 lines
567 B
YAML
18 lines
567 B
YAML
name: poetry
|
|
description: Profile for poetry, extending pypi-restrictive with poetry environment variables
|
|
inherits: pypi-restrictive
|
|
|
|
package_managers:
|
|
- poetry
|
|
|
|
environment:
|
|
# The pypi-restrictive base allows no environment variables. poetry needs
|
|
# its own config namespace and can delegate to pip. Sibling tool credentials
|
|
# (UV_PUBLISH_TOKEN) and TWINE_* stay scrubbed.
|
|
#
|
|
# Accepted trade-off: POETRY_* re-allows POETRY_PYPI_TOKEN_PYPI and
|
|
# POETRY_HTTP_BASIC_PYPI_PASSWORD, poetry's own publishing credentials.
|
|
allow:
|
|
- POETRY_*
|
|
- PIP_*
|