Skip to content

fix(sandbox): allow only the bare gh auth status - #2019

Merged
potiuk merged 1 commit into
apache:mainfrom
potiuk:gh-auth-status-ask
Nov 7, 2026
Merged

potiuk merged 1 commit into
apache:mainfrom
potiuk:gh-auth-status-ask

Conversation

@potiuk

@potiuk potiuk commented Nov 7, 2026

Copy link
Copy Markdown
Member

Summary

The local settings template allowed gh auth status with any arguments.
Skills run only the bare command, so this allows exactly that.
A call with flags now goes through the normal prompt, like other gh commands.

Type of change

  • Cross-cutting (RFC, AGENTS.md, sandbox, privacy-LLM)

Test plan

  • prek run --all-files --skip workspace-pytest passes
  • tools/sandbox-lint tests pass, including a new check on the entry

Gen-AI disclosure

Drafted with Claude Code and reviewed by the maintainer.

🤖 Generated with Claude Code

The local template allowed gh auth status with any arguments. Skills only
run the bare command, so allow exactly that; a call with flags goes
through the normal prompt like other gh commands.

Generated-by: Claude Opus 5
@github-actions github-actions Bot added family:setup setup-* skills family:tools tools/* family:docs Docs, MISSION.md, READMEs capability:platform Framework / agent substrate skills (install, verify, doctor, override, status, setup bootstrap) substrate:sandbox Tool substrate: agent isolation, egress control, settings audit labels Nov 7, 2026
@potiuk
potiuk merged commit d217f6a into apache:main Nov 7, 2026
14 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

capability:platform Framework / agent substrate skills (install, verify, doctor, override, status, setup bootstrap) family:docs Docs, MISSION.md, READMEs family:setup setup-* skills family:tools tools/* substrate:sandbox Tool substrate: agent isolation, egress control, settings audit

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant