runline 0.25.0 → 0.26.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist/core/engine.js +10 -0
- package/package.json +1 -1
package/dist/core/engine.js
CHANGED
|
@@ -161,6 +161,16 @@ export class ExecutionEngine {
|
|
|
161
161
|
try {
|
|
162
162
|
acquired = this.acquire(shape, () => new Worker(buildWorkerSource(pluginNames, helpData), {
|
|
163
163
|
eval: true,
|
|
164
|
+
// Empty by construction: without an `env` option the worker
|
|
165
|
+
// inherits a copy of the host's entire environment, and
|
|
166
|
+
// Runline lives inside credential-bearing hosts (vex's
|
|
167
|
+
// server process, the pi agent process). Bodies hold a real
|
|
168
|
+
// `require` and a live `process`, so an inherited env is one
|
|
169
|
+
// line of agent code away from every host secret. Nothing
|
|
170
|
+
// in the worker needs an environment: actions execute
|
|
171
|
+
// host-side, connection configs are hydrated host-side, and
|
|
172
|
+
// ferrosearch is required by absolute path.
|
|
173
|
+
env: {},
|
|
164
174
|
resourceLimits: { maxOldGenerationSizeMb: memoryLimitMb },
|
|
165
175
|
}));
|
|
166
176
|
}
|