mirror of
https://github.com/Significant-Gravitas/AutoGPT.git
synced 2026-02-14 08:45:12 -05:00
CodeQL traces session_id → cwd → os.makedirs/open as uncontrolled path. Add realpath + startswith check against /tmp/copilot- prefix directly in write_transcript_to_tempfile so CodeQL recognizes the sanitization. Also resolve the prefix with realpath for macOS where /tmp → /private/tmp.