From ddd394796c8022b62ca78289a52d982c507c8eff Mon Sep 17 00:00:00 2001
From: Keith Patrick <keithy@consultant.com>
Date: Sun, 8 Mar 2026 23:17:59 +0000
Subject: [PATCH] fix(security): add PICOCLAW_HOME, PICOCLAW_CONFIG,
 PICOCLAW_EXE to default allowlist

---
 pkg/tools/shell/env.go | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/pkg/tools/shell/env.go b/pkg/tools/shell/env.go
index 1b4409b6e..40b1f61a5 100644
--- a/pkg/tools/shell/env.go
+++ b/pkg/tools/shell/env.go
@@ -34,7 +34,10 @@ var DefaultEnvAllowlist = map[string]bool{
 	"HTTP_PROXY":   true,
 	"HTTPS_PROXY":  true,
 	"NO_PROXY":     true,
+	"PICOCLAW_HOME":      true,
+	"PICOCLAW_CONFIG":   true,
 	"PICOCLAW_SERVICE_NAME": true,
+	"PICOCLAW_EXE":      true,
 }
 
 // defaultEnvAllowPrefixes are env var prefixes that are always allowed.