fix: require typed shell policy entries #340

Open
nsaspy wants to merge 0 commits from rage/282-shell-typed-config into main
Owner

Implements #282 and advances #5.

RED commit 907bcaefc1e30fd99396380d0ae885f637a252bd proves malformed non-string allowlist/root entries are currently coerced instead of rejected. The implementation will tighten configuration parsing only; approval, argv execution, and cancellation boundaries remain unchanged.

Implements #282 and advances #5. RED commit `907bcaefc1e30fd99396380d0ae885f637a252bd` proves malformed non-string allowlist/root entries are currently coerced instead of rejected. The implementation will tighten configuration parsing only; approval, argv execution, and cancellation boundaries remain unchanged.
Some checks failed
CI / test (pull_request) Failing after 16s
This branch is already included in the target branch. There is nothing to merge.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin rage/282-shell-typed-config:rage/282-shell-typed-config
git switch rage/282-shell-typed-config

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff rage/282-shell-typed-config
git switch rage/282-shell-typed-config
git rebase main
git switch main
git merge --ff-only rage/282-shell-typed-config
git switch rage/282-shell-typed-config
git rebase main
git switch main
git merge --no-ff rage/282-shell-typed-config
git switch main
git merge --squash rage/282-shell-typed-config
git switch main
git merge --ff-only rage/282-shell-typed-config
git switch main
git merge rage/282-shell-typed-config
git push origin main
Sign in to join this conversation.
No description provided.