[PR] Fix shell injection in GitHook SSH passphrase askpass script [airflow]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk opened a new pull request, #64126:
URL: https://github.com/apache/airflow/pull/64126

   The passphrase was embedded in a generated shell script using bare single quotes,
   which would break or allow command injection if the passphrase contained
   shell metacharacters (single quotes, `$`, backticks, etc.). Use `shlex.quote()`
   to safely escape the value.
   
   ---
   
   ##### Was generative AI tooling used to co-author this PR?
   
   - [X] Yes — Claude Code (Claude Opus 4.6)
   
   Generated-by: Claude Code (Claude Opus 4.6) following [the guidelines](https://github.com/apache/airflow/blob/main/contributing-docs/05_pull_requests.rst#gen-ai-assisted-contributions)


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org

Re: [PR] Fix shell injection in GitHook SSH passphrase askpass script [airflow]

["potiuk (via GitHub)" <gi...@apache.org>]

potiuk merged PR #64126:
URL: https://github.com/apache/airflow/pull/64126


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: commits-unsubscribe@airflow.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org