Repository navigation

feat(provision): keep credentials out of the state file entirely - #1832

Open

clonea1 wants to merge 17 commits into

ruvnet:mainfrom

clonea1:contrib/provisioning-tooling

Commits on Sep 4, 2026
- feat(provision): identify boards by MAC instead of by serial port
  
  Joe
  and
  ruvnet
  committed
  70450ee
- feat(provision): wrapper that keeps the WiFi password off the command line
  
  Joe
  and
  ruvnet
  committed
  76b8417
- chore(provision): use obvious placeholders in the example schema
  
  Joe
  and
  ruvnet
  committed
  7f6dade
- feat(provision): keep credentials out of the state file entirely
  
  Joe
  and
  ruvnet
  committed
  52977fe
- chore(provision): justify the two subprocess.run findings
  
  Joe
  and
  ruvnet
  committed
  d3c4b3a
- fix(provision): validate config values before they reach an argv list
  
  Joe
  and
  ruvnet
  committed
  ab3f2ed
Commits on Sep 6, 2026
- fix(provision): validate the serial port before it reaches an argv list
  
  authored and
  Joe
  committed
  37de4b4
- fix(provision): scrub a legacy state file on read, not on next write
  
  authored and
  Joe
  committed
  618a469
- test(provision): pin the state-file secret contract, and run it in CI
  
  authored and
  Joe
  committed
  5dfdbb5
- docs(provision): say why shlex.quote is wrong here, and drop the dead marker
  
  authored and
  Joe
  committed
  c348a7a
- revert(git): stop ignoring the board index and provisioning profiles
  
  authored and
  Joe
  committed
  49aa582
- feat(provision): expand ~ in credential paths, so a profile names no user
  
  authored and
  Joe
  committed
  3a53781
Commits on Sep 16, 2026
- fix(provision): suppress the two dangerous-subprocess-use findings with a working nosemgrep comment
  
  authored and
  Joe
  committed
  20a6e66
Commits on Oct 9, 2026
- Merge origin/main into contrib/provisioning-tooling
  
  authored and
  Joe
  committed
  943844c
- provision_node: pass argv through shlex round-trip instead of nosemgrep
  
  authored and
  Joe
  committed
  05560a9
- Revert the shlex round-trip added only to satisfy Semgrep; keep the reasoned nosemgrep
  
  authored and
  Joe
  committed
  69f82e5
Commits on Oct 10, 2026
- Merge upstream main into contrib/provisioning-tooling (led_strip 3.0.x pin)
  
  Joe
  authored and
  Joe
  committed
  7626c0c

Navigation Menu

Repository navigation

feat(provision): keep credentials out of the state file entirely - #1832

feat(provision): keep credentials out of the state file entirely#1832
clonea1 wants to merge 17 commits into
ruvnet:mainfrom
clonea1:contrib/provisioning-tooling

Commits on Sep 4, 2026

feat(provision): identify boards by MAC instead of by serial port

feat(provision): wrapper that keeps the WiFi password off the command line

chore(provision): use obvious placeholders in the example schema

feat(provision): keep credentials out of the state file entirely

chore(provision): justify the two subprocess.run findings

fix(provision): validate config values before they reach an argv list

Commits on Sep 6, 2026

fix(provision): validate the serial port before it reaches an argv list

fix(provision): scrub a legacy state file on read, not on next write

test(provision): pin the state-file secret contract, and run it in CI

docs(provision): say why shlex.quote is wrong here, and drop the dead marker

revert(git): stop ignoring the board index and provisioning profiles

feat(provision): expand ~ in credential paths, so a profile names no user

Commits on Sep 16, 2026

fix(provision): suppress the two dangerous-subprocess-use findings with a working nosemgrep comment

Commits on Oct 9, 2026

Merge origin/main into contrib/provisioning-tooling

provision_node: pass argv through shlex round-trip instead of nosemgrep

Revert the shlex round-trip added only to satisfy Semgrep; keep the reasoned nosemgrep

Commits on Oct 10, 2026

Merge upstream main into contrib/provisioning-tooling (led_strip 3.0.x pin)