resolve_fetch_command used shlex.split, which treated `|` as a literal argument — breaking reuse-surface-hub-write-token (kubectl | base64 -d). Piped commands now run via shell=True with inherited stdio for --fetch. |
||
|---|---|---|
| .. | ||
| routing | ||
| scripts | ||
| __init__.py | ||
| access.py | ||
| audit.py | ||
| ca.py | ||
| cli.py | ||
| config.py | ||
| doubles.py | ||
| inventory.py | ||
| memory.py | ||
| models.py | ||
| policy.py | ||
| posture.py | ||
| proxy.py | ||
| scorecard.py | ||
| vault.py | ||
| vault_hints.py | ||
| worker.py | ||