Method AddToWhitelist

internal/plugins/command-runner/executor.go:299–310

AddToWhitelist adds a command to the in-memory whitelist for a target type. This change is session-only and does not persist to the config file.

(targetType TargetType, command string)

// AddToWhitelist adds a command to the in-memory whitelist for a target type.
// This change is session-only and does not persist to the config file.
func (e *Executor) AddToWhitelist(targetType TargetType, command string) {
	switch targetType {
	case TargetHost:
		e.config.AllowedCommands.Host = append([]string{command}, e.config.AllowedCommands.Host...)
	case TargetContainer:
		e.config.AllowedCommands.Container = append([]string{command}, e.config.AllowedCommands.Container...)
	case TargetVM:
		e.config.AllowedCommands.VM = append([]string{command}, e.config.AllowedCommands.VM...)
	}
	// Refresh the validator so it picks up the new entry.
	e.validator = NewValidator(e.config)
}

// ExecuteCustomHostCommand executes an arbitrary command on a host via SSH without
// whitelist validation. The command must be non-interactive; sudo requiring a password