Skip to content

#329 - Document that the contextual values may come from users and are logged - #330

Open
njoubert-cleverage wants to merge 2 commits into
mainfrom
329
Open

njoubert-cleverage wants to merge 2 commits into
mainfrom
329

Conversation

@njoubert-cleverage

Copy link
Copy Markdown
Member

Description

Fixes #329.

  • Quick start, "Contextual values": the values are inserted as is and may come from people who do not write the process configuration; keep them out of the options interpreted by the tasks (string commandline, SQL, callback, expression) and do not pass secrets in the context (logged with every record, stored by the UI bundle).
  • Good practices, "Use the context for runtime parameters": same warning, short.
  • command_runner_task.md: the placeholders are untrusted input too; use an array commandline or an env variable quoted in the command.

Requirements

  • Documentation updates
    • Reference
    • Changelog
  • Unit tests

Breaking changes

None (documentation only).

🤖 Generated with Claude Code

njoubert-cleverage and others added 2 commits October 21, 2026 17:49
…e logged: interpreted options, secrets

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Document that the contextual values may come from users: interpreted options and secrets

1 participant