{
  "id": "gitea-api",
  "description": "curl against the Gitea2 API. The token is rendered into a 0600 tmpfs curl -K config file (header = \"Authorization: token {SECRET}\") so it never appears on argv or env.",
  "executable": "curl",
  "injection": {
    "method": "file",
    "file_template": "header = \"Authorization: token {SECRET}\"\nsilent\nshow-error\nfail\nmax-time = 25\n"
  },
  "args_template": ["-K", "{SECRET_FILE}"],
  "allowed_subcommands": [],
  "arg_regex": "^[\\w ./:@\\-+=%{},-]+$",
  "forbidden_regex": "[;&|`$<>(){}\\[\\]\n]|(^|/)\\.\\.(/|$)|Authorization:|token=",
  "target_hosts": ["git.paginica.com"],
  "timeout": 30,
  "max_output_bytes": 65536
}