Repository navigation

Refuse plaintext Pulumi reads in the guarded action - #236

Merged

woksin merged 4 commits into

mainfrom

pulumi-guarded-admission

Nov 12, 2026

Merged

Refuse plaintext Pulumi reads in the guarded action#236
woksin merged 4 commits into
mainfrom
pulumi-guarded-admission

Commits on Nov 12, 2026
- Refuse plaintext Pulumi reads before command execution
  woksin
  committed
  dce4be9
- Handle ESC aliases and scoped flags in Pulumi admission
  woksin
  committed
  6c2b549
- Replace Pulumi option parsing with a token deny scan
  woksin
  committed
  fc8bea1
- Describe the token deny scan in the guarded Pulumi action header
  woksin
  committed
  a33714e