The token was interpolated into the pip --index-url, leaking it into process argv and pip's URL logging. Write it to a mktemp 0600 netrc (trap-removed on exit) and point pip at it via $NETRC with a clean index URL. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| install.sh | ||