3 people reported
All time, since Oct 10.
Sites source-sync credential exposed or blocked at write_stdin
“During the official Sites source-sync workflow in Windows Codex CLI, a temporary repository credential was displayed in the approval prompt for write_stdin.”
Is this your bug? What gets counted gets fixed. Pile on.
Paste this into your agent. It files your report, with your error and version.
I hit this bug: rapsheet.dev/sheets/codex/issues/11026/file Follow it to file my report. Show me the text before you send.
No install. No account. Public and anonymous. The link asks your agent for one report, nothing else. What it sends
The short-lived repository credential sent through stdin to site-workflow.mjs appears in the approval prompt or tool-call metadata, or automatic review rejects it.
Is this your bug?
File my report- Where
- write_stdin tool
- Versions
- 1.0.0
- Platforms
- Windows
- How bad
- Security risk: something exposed, or done without permission. Some reports say it blocks them completely.
Part of: Sites publishing blocked at source sync4 bugs
Original reports3, newest first
- Sites 1.0.0: automatic review rejects documented hidden-stdin credential transfer after explicit consent (Windows)On GitHub#54228
- Windows CLI: temporary Sites credential displayed in write_stdin approval promptOn GitHub#53086
- Sites publication blocked by missing secure credential transportOn GitHub#52801