Harden publish/build/install scripts and fix audit findings #21

Closed

kimi-bot-andresmgsl wants to merge 1 commit from fix/audit-hardening into main

Author	SHA1	Message	Date
kimi-reviewer-andresmgsl	33079afb33	Harden publish/build/install scripts and fix audit findings Some checks failed ci / test (pull_request) Has been cancelled Details - publish-deb: keep the token out of the process list (curl -K config file via mktemp, no JSON round-trip through node argv), mktemp the response file with trap cleanup, add --max-time to the upload - build-deb: umask 022 + chmod -R a+rX so the payload is world-readable even when built with umask 077 - install-apt: only fall back to [trusted=yes] on an actual signature verification failure; other apt-get update failures stay fatal - auth logout: warn that a manually supplied token stays active on the server and point at the web UI revocation page - repo import-batch: resolve the source token inside the per-item try so one bad item no longer aborts the whole batch - auth status: print me.login (the /user response has no username field) and exit 1 when not authenticated	2026-07-26 23:07:16 +00:00

Author

SHA1

Message

Date

kimi-reviewer-andresmgsl

33079afb33

Harden publish/build/install scripts and fix audit findings

ci / test (pull_request) Has been cancelled

Details

- publish-deb: keep the token out of the process list (curl -K config
  file via mktemp, no JSON round-trip through node argv), mktemp the
  response file with trap cleanup, add --max-time to the upload
- build-deb: umask 022 + chmod -R a+rX so the payload is world-readable
  even when built with umask 077
- install-apt: only fall back to [trusted=yes] on an actual signature
  verification failure; other apt-get update failures stay fatal
- auth logout: warn that a manually supplied token stays active on the
  server and point at the web UI revocation page
- repo import-batch: resolve the source token inside the per-item try so
  one bad item no longer aborts the whole batch
- auth status: print me.login (the /user response has no username field)
  and exit 1 when not authenticated

2026-07-26 23:07:16 +00:00