mateo-berri 3e7ecdd152 fix(cron_vm): greptile — scrub provider secrets from pytest invocation env ... Wrap the pytest call in run_daily.sh in `env -i` with the same minimal allowlist the PR-gate already uses, mirroring the CircleCI step. The systemd EnvironmentFile injects ANTHROPIC_API_KEY / AWS_BEARER_TOKEN_BEDROCK / VERTEXAI_* / AZURE_FOUNDRY_* / AGENT_SHIN_GITHUB_TOKEN / GITHUB_TOKEN into the script for the proxy to consume; pytest inherits them by default but only needs the loopback proxy URL/key. Scrubbing them closes two paths: PR-controlled test code reading them out of os.environ, and model-directed Read tool calls reaching /proc/<pytest-pid>/environ during PDF/vision cells. Add a pin test mirroring the existing version-probe one.		2026-05-19 06:40:17 +00:00
..
__init__.py	fix(cron): bugbot — paginate all release pages to pick highest-semver stable	2026-05-17 21:39:36 +00:00
test_run_daily_pytest_scrubs_env.py	fix(cron_vm): greptile — scrub provider secrets from pytest invocation env	2026-05-19 06:40:17 +00:00
test_run_daily_release_pagination.py	fix(cron): bugbot — paginate all release pages to pick highest-semver stable	2026-05-17 21:39:36 +00:00
test_run_daily_version_probe_scrubs_env.py	fix(cron_vm): veria — isolate $HOME and hide credential dotdirs from claude	2026-05-19 05:49:18 +00:00
test_systemd_unit_credential_isolation.py	fix(cron_vm): veria — isolate $HOME and hide credential dotdirs from claude	2026-05-19 05:49:18 +00:00