vercel/turborepo

The following are security-sensitive boundaries and source-observed coupling points, not confirmed vulnerabilities. Native command execution, archive restoration, user-level credentials, remote cache authorization, and internal operator deployment protection deserve focused review. The bounded inspection does not establish whole-repository coverage or the absence of other risks.

• Task command configuration can replace native commands or opt out entirely; executable, arguments, cwd, and environment are applied before spawning, making repository task definitions an execution trust boundary.
  crates/turborepo-task-executor/src/command.rs#L254-323crates/turborepo-task-executor/src/exec.rs#L398-403
• Archive restore writes into the anchor and supports directories, regular files, and symlinks; Unix regular-file permissions are masked to 0777 and unsupported entry types fail.
  crates/turborepo-cache/src/cache_archive/restore.rs#L63-83crates/turborepo-cache/src/cache_archive/restore.rs#L191-200crates/turborepo-cache/src/cache_archive/restore_regular.rs#L35-61
• Output collection follows symlinked output roots, filters peer managed logs, and rejects paths outside the repository; restoration currently fetches the artifact without using output globs to restrict extraction.
  crates/turborepo-run-cache/src/lib.rs#L639-647crates/turborepo-run-cache/src/lib.rs#L783-821
• Login persists access and refresh tokens outside the repository through create_with_contents_secret; credential routing distinguishes vca_ tokens from legacy tokens and clears alternate storage.
  crates/turborepo-cli/src/commands/login/mod.rs#L145-182crates/turborepo-auth/src/lib.rs#L420-445
• Artifact signing uses TURBO_REMOTE_CACHE_SIGNATURE_KEY and binds hash, team ID, and body length; short-key enforcement is conditional, with warning-only compatibility unless longerSignatureKey is enabled.
  crates/turborepo-cache/src/signature_authentication.rs#L55-95crates/turborepo-cache/src/http.rs#L78-87
• Remote-cache token recovery is serialized and retries with changed credentials; failed recovery disables remote caching for the run, while task cache-fetch errors are logged before execution continues.
  crates/turborepo-cache/src/http.rs#L136-187crates/turborepo-task-executor/src/exec.rs#L362-381
• The GraphQL service binds 127.0.0.1:8000 and rejects Host values outside localhost/127.0.0.1, explicitly guarding its local HTTP exposure.
  crates/turborepo-query/src/server.rs#L17-51
• Factory documents Vercel Deployment Protection as its outer operator authentication layer and same-origin/action-header checks for mutations; deployment protection configuration is therefore a material access-control dependency.
  apps/factory/README.md#L3-3apps/factory/README.md#L37-42