Ruben FiszelandClaude Opus 5.5 1c068f33e1 fix(worker): keep script env vars off the nsjail launcher process (#11749) ...

* fix(worker): keep script env vars off the nsjail launcher process

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(worker): keep script env off the ruby gem-install nsjail launcher

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(worker): keep script env off the unjailed javac compile step

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

* fix(worker): gate script_overrides on the executors that use it

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

---------

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-14 10:14:46 +02:00

..

build.csharp.config.proto

fix: run dependency resolution and build steps under nsjail (#11609)

2026-10-07 21:39:55 +02:00

download_deps.py.sh

fix(python): split PIP_TRUSTED_HOST by whitespace to support multiple hosts (#9675)

2026-06-19 12:59:08 +00:00

download.py.config.proto

fix(nsjail): precompile python stdlib + raise download rlimit_as (#9429)

2026-06-03 08:47:19 +00:00

download.ruby.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

download.rust.config.proto

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

install.r.config.proto

fix: prevent cross-tenant DNS poisoning via writable /etc in nsjail (#9194)

2026-05-17 12:54:38 +00:00

lock.php.config.proto

fix: run dependency resolution and build steps under nsjail (#11609)

2026-10-07 21:39:55 +02:00

lock.py.config.proto

fix: run dependency resolution and build steps under nsjail (#11609)

2026-10-07 21:39:55 +02:00

lock.ruby.config.proto

fix: prevent cross-tenant DNS poisoning via writable /etc in nsjail (#9194)

2026-05-17 12:54:38 +00:00

run.ansible.config.proto

fix: stream ansible playbook logs in real time (#10669)

2026-08-12 21:52:09 +02:00

run.bash.config.proto

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

run.bun.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.csharp.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.dbt.config.proto

feat: run dbt projects as a first-class Windmill runtime (#10326)

2026-08-01 11:58:05 +00:00

run.docker.config.proto

fix: return result.json and stdout results from sandboxed containers (#10460)

2026-08-03 12:35:12 +02:00

run.go.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.java.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.nu.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.php.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.powershell.config.proto

feat(nsjail): optional disk-backed /tmp via instance setting (#9272)

2026-05-21 15:34:49 +00:00

run.python3.config.proto

feat(nsjail): make python/ansible rlimit_as configurable per worker (GIT-921) (#10138)

2026-07-15 17:52:39 +02:00

run.r.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.ruby.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00

run.rust.config.proto

fix(worker): keep script env vars off the nsjail launcher process (#11749)

2026-10-14 10:14:46 +02:00