gastown/crew/joe 18578b3030 fix(security): validate beads prefix to prevent command injection (gt-l1xsa) ...

Add isValidBeadsPrefix() to validate prefix format before passing to
exec.Command. Prefixes from config files (detectBeadsPrefixFromConfig)
are now validated to contain only alphanumeric and hyphen characters,
start with a letter, and be max 20 chars.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-01-05 00:02:43 -08:00

..

manager_test.go

fix(security): validate beads prefix to prevent command injection (gt-l1xsa)

2026-01-05 00:02:43 -08:00

manager.go

fix(security): validate beads prefix to prevent command injection (gt-l1xsa)

2026-01-05 00:02:43 -08:00

types.go

feat(rig): Add --branch flag for custom default branch

2026-01-04 14:01:02 -08:00