Teknium 556e0f4b43 fix(docker): add explicit env allowlist for container credentials (#1436) ...

Docker terminal sessions are secret-dark by default. This adds
terminal.docker_forward_env as an explicit allowlist for env vars
that may be forwarded into Docker containers.

Values resolve from the current shell first, then fall back to
~/.hermes/.env. Only variables the user explicitly lists are
forwarded — nothing is auto-exposed.

Cherry-picked from PR #1449 by @teknium1, conflict-resolved onto
current main.

Fixes #1436
Supersedes #1439

2026-03-17 02:34:35 -07:00

39 KiB

Raw Blame History

View Raw