mirror-ghostty/.github/workflows
Mitchell Hashimoto d231e94535
Snap: Do not leak snap variables or snap paths into children (#8771)
Avoid leaking snap environment values and in particular the `$SNAP*`
values to the children that we run from the terminal.

Do this programmatically instead of the launcher, since ghostty needs
know the environment it runs in, while it must not leak the info to the
children.

We've also another leak on snap, that creates a more visible problem
(wrong matching of children applications) that is the apparmor security
profile.

I've handled it at
cc3b46f600
but that requires some love in order to fully decouple the snap option
to the build, to avoid including it in non-snap builds, so an help would
be appreciated there.

> This PR was contains code (in `filterSnapPaths`) that was improved by
DeepSeek.
2025-09-29 12:58:24 -07:00
..
clean-artifacts.yml pin GitHub Actions to specific SHAs 2025-07-06 06:59:50 -07:00
milestone.yml Upgrade hustcer/milestone-action to v2.9 2025-07-26 11:57:13 +08:00
nix.yml build(deps): bump cachix/install-nix-action from 31.6.0 to 31.6.1 2025-09-08 00:07:11 +00:00
publish-tag.yml pin GitHub Actions to specific SHAs 2025-07-06 06:59:50 -07:00
release-tag.yml ci: source tarball needs to be uploaded to staged artifacts 2025-09-15 09:24:54 -07:00
release-tip.yml ci: release tip should also staple the dmg 2025-09-15 08:49:47 -07:00
snap.yml build(deps): bump namespacelabs/nscloud-cache-action 2025-09-08 00:07:18 +00:00
test.yml Snap: Do not leak snap variables or snap paths into children (#8771) 2025-09-29 12:58:24 -07:00
update-colorschemes.yml ci: update-colorschemes sets GH token for gh 2025-09-14 07:07:27 -07:00