fix(agent,agent-installer): avoid leaking tunnel enrollment JWT via process cmdline#1798

Merged

Benoît Cortier (CBenoit) merged 11 commits into

copilot/stop-jwt-leak-and-remove-argv-risk

May 27, 2026

Commits on May 26, 2026

fix(agent): avoid leaking tunnel enrollment JWT via process cmdline and MSI logs

Copilot
and
Benoît Cortier (CBenoit)
authored
test(agent): move stdin enrollment tests to testsuite E2E cli module

Copilot
and
Benoît Cortier (CBenoit)
authored
Apply suggestion from @CBenoit
Benoît Cortier (CBenoit)
authored
refactor(agent): read only first line from stdin, add E2E enrollment test with real Gateway

Copilot
and
Benoît Cortier (CBenoit)
authored
test(agent): hardcode provisioner test key instead of generating at runtime

Copilot
and
Benoît Cortier (CBenoit)
authored
test(agent): hardcode JTI UUID and remove uuid dependency from testsuite

Copilot
and
Benoît Cortier (CBenoit)
authored
refactor(agent): simplify enrollment test with disable_token_validation, remove picky/time deps

Copilot
and
Benoît Cortier (CBenoit)
authored
refactor(agent): inline provisioner key value, remove extra blank line in Cargo.toml

Copilot
and
Benoît Cortier (CBenoit)
authored
.
Benoît Cortier (CBenoit)
committed
.
Benoît Cortier (CBenoit)
committed

Commits on May 27, 2026

Apply suggestion from @CBenoit
Benoît Cortier (CBenoit)
authored