Graveyard lessons are written into a packed lifeboat without the secret scan pack applies

Graveyard lessons are written into a packed lifeboat without the secret scan pack applies

Published as security advisory GHSA-f29r-fhfh-xhw3; the advisory is the public account of this finding.

What

abcd disembark graveyard writes host-agent lesson prose into an already packed lifeboat (internal/core/lifeboat/graveyard_lessons.go:43-195). The text is cleaned for display only (termsafe.CleanProse); the secret scanner never sees it, whereas pack scans every file it plans and refuses on a hit. A secret the agent copies from the source history into a lesson therefore enters the lifeboat unscanned, and travels with it to wherever it is embarked.

Each lesson must cite an archaeology or abandoned finding id, and the lifeboat is the person's own pack, so the trigger is the person's own agent quoting a secret, not an attacker. Found from code; not reproduced.

Affected versions

Every released version up to and including 0.15.1 with graveyard lessons. Patched versions will be set when the release carrying the fix is cut.

Would it exist without abcd?

No. abcd writes this text into an artefact whose other contents it scans before writing, and states that pack refuses on a hit. abcd added the unscanned path, so abcd fixes it.

Fix

Run the lessons through the same scanner pass pack applies, refusing (or redacting) on a hard fail before anything is written into the lifeboat. No repository behaviour changes.