fix: resolve security, reliability, and code quality issues across the codebase - #6

Merged

stepbeta merged 12 commits into

mainfrom

fix/various-issues

Jun 15, 2026

Commits on Jun 15, 2026

fix: replace panic with cobra.CheckErr for Viper binding failures
Stefano Ciarcià
committed
7bae70d
refactor: replace mutable package-level vars with local flag reads in listRemote
Stefano Ciarcià
committed
cfb71a5
fix: validate file existence after auto-install in use command
Stefano Ciarcià
committed
76f4ab9
fix: reject path traversal attempts in tar extraction
Stefano Ciarcià
committed
899273c
feat: add SHA256 checksum verification for downloaded binaries
Stefano Ciarcià
committed
7ec0444
fix: use restrictive permissions (0755) for created directories
Stefano Ciarcià
committed
59d40f9
fix: use TrimPrefix for version extraction instead of Split on hyphen
Stefano Ciarcià
committed
7ff2509
fix: direct cache error messages to stderr instead of stdout
Stefano Ciarcià
committed
ffaa27a
refactor: create GitHub client once per install instead of twice
Stefano Ciarcià
committed
eca9910
fix: direct response body close warning to stderr
Stefano Ciarcià
committed
dbd3d75
fix: use indeterminate progress bar for release listing until page count is known
Stefano Ciarcià
committed
c1d1551
fix: formatting
Stefano Ciarcià
committed
72f8472