You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
[P1] Full-rebuild ownership check can allow deletion of the source project #9
With build_dir: ".", an ordinary build creates .redun-cache.db beside the config—even if the build then fails because the target is missing. A subsequent --full-rebuild treats that database as proof that the directory is disposable and recursively deletes the config, source files, and everything else in it.
Put a valid config and a source file in the directory; set build_dir: ".".
Run a normal build with the configured target absent. The build fails, but leaves .redun-cache.db.
Run with --full-rebuild. The ownership check now passes and deletes the directory.
The review probe confirmed that even the failed first build created the marker, and that the cleanup subsequently removed both the original config and source.
Expected behavior: reject unsafe build-directory ownership before creating the cache marker, or otherwise ensure cleanup cannot remove source/config/unrelated files. The presence of a database alone is insufficient evidence of ownership.
Found while reviewing PR #7, toolchain at ce12c48.
changed the title [-][P1] Full-rebuild ownership check can allow deletion of the source project[/-][+]Full-rebuild ownership check can allow deletion of the source project[/+]on Nov 4, 2026
changed the title [-]Full-rebuild ownership check can allow deletion of the source project[/-][+][P1] Full-rebuild ownership check can allow deletion of the source project [found by chatgpt codex][/+]on Nov 4, 2026
changed the title [-][P1] Full-rebuild ownership check can allow deletion of the source project [found by chatgpt codex][/-][+][P1] Full-rebuild ownership check can allow deletion of the source project[/+]on Nov 4, 2026
Activity
[-][P1] Full-rebuild ownership check can allow deletion of the source project[/-][+]Full-rebuild ownership check can allow deletion of the source project[/+][-]Full-rebuild ownership check can allow deletion of the source project[/-][+][P1] Full-rebuild ownership check can allow deletion of the source project [found by chatgpt codex][/+][-][P1] Full-rebuild ownership check can allow deletion of the source project [found by chatgpt codex][/-][+][P1] Full-rebuild ownership check can allow deletion of the source project[/+]