diff options
| author | hathach <[email protected]> | 2026-06-02 11:18:14 +0700 |
|---|---|---|
| committer | hathach <[email protected]> | 2026-06-02 11:18:14 +0700 |
| commit | 2fc46b690996f776e3b36bcaa9865e7d2a8f8c89 (patch) | |
| tree | 024f74a625ad2e0fb21a0dcb6b60c5cb6213e1fb /docs/reference | |
| parent | 6936cc630dfc0d125337e3f4f6e9322b503df3b2 (diff) | |
ci(claude): drop Bash allowlist entirely (Codex P1, round 2)
Codex correctly noted that allowing python3/python (and really cmake/make
too) is arbitrary code + network execution: a command allowlist cannot
contain a prompt-injected or malicious fork PR when this job holds the
OAuth secret + write token, and the review workflow directs fork PRs to
@claude.
The Bash allowlist was beyond the original scope (auto-commit/PR) anyway.
Remove it: Claude edits files and the action commits/opens the PR, and the
resulting commit is verified by the existing CircleCI matrix. Keep
use_commit_signing and --max-turns 30.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Diffstat (limited to 'docs/reference')
0 files changed, 0 insertions, 0 deletions