klesh opened a new pull request, #8878: URL: https://github.com/apache/incubator-devlake/pull/8878
### Summary - hardens dbt pipeline inputs by constraining local `projectPath` values to `DBT_PROJECTS_DIR`, rejecting unsafe git URLs, and cloning git-backed projects into managed temp directories instead of deleting caller-supplied paths - wires dbt conversion to depend on the git clone step and cleans up managed project directories after the task finishes - changes auth to default `AUTH_ENABLED` to true unless explicitly disabled, only require `SESSION_SECRET` for OIDC, and updates examples/tests to match ### Does this close any open issues? Closes N/A ### Screenshots N/A ### Other Information - Added regression coverage in `backend/plugins/dbt/tasks/options_test.go` and `backend/helpers/oidchelper/config_test.go` - Added the `pr-type/bug-fix` label -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
