Skip to content

Harden safe-output field validation #51133

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
pelikhan merged 28 commits into from
Aug 8, 2026
Merged

Harden safe-output field validation #51133

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
28 commits
Select commit Hold shift + click to select a range
9d80a26
Harden safe-output field validation
pelikhan Aug 7, 2026
0a76fb9
Merge branch 'main' into security/safe-output-field-allowlist
pelikhan Aug 7, 2026
80b0655
Update safe outputs specification
Copilot Aug 7, 2026
2a01f29
Start PR finisher pass
Copilot Aug 7, 2026
5be5797
Address safe output review findings
Copilot Aug 7, 2026
4b35746
Merge branch 'main' into security/safe-output-field-allowlist
pelikhan Aug 7, 2026
c7aef55
Update generated workflow locks
Copilot Aug 7, 2026
d909c06
Address safe-output review edge cases
Copilot Aug 7, 2026
df26e06
Include commit SHA helper in setup bundle
Copilot Aug 7, 2026
fbf9d62
Reject unnormalized validated safe-output fields
Copilot Aug 7, 2026
70398c7
Clarify unnormalized safe-output field errors
Copilot Aug 7, 2026
bee34d4
Simplify safe-output validation diagnostics
Copilot Aug 7, 2026
89f954a
Allow safe add_comment comment ID allowlists
Copilot Aug 7, 2026
08021cb
Tighten add_comment target URL parsing
Copilot Aug 7, 2026
178ff31
Use issue URL for comment target derivation
Copilot Aug 7, 2026
65c5eea
Merge branch 'main' into security/safe-output-field-allowlist
pelikhan Aug 7, 2026
c35f9fe
Refresh branch and fix validation fallout
Copilot Aug 7, 2026
b9f7fe8
Start safe output spec follow-up
Copilot Aug 7, 2026
716d34c
Add changeset
github-actions[bot] Aug 7, 2026
ac6e292
Improve test quality: migrate tracker_id_integration_test.go to testi…
Copilot Aug 7, 2026
23a10f0
Update safe output comment ID spec
Copilot Aug 7, 2026
891190d
Merge branch 'main' into security/safe-output-field-allowlist
pelikhan Aug 7, 2026
a15b0f7
Fix lint-go: use maps.Copy and drop unneeded nil check
Copilot Aug 7, 2026
9c43ee3
Fix filename quoting bypass in post-apply size/protection checks
Copilot Aug 7, 2026
0efed9c
Address matt-pocock review: comment_id mutation, upload targetFileNam…
Copilot Aug 7, 2026
c16df32
Clarify comment_id stripping intent per code review feedback
Copilot Aug 7, 2026
985206c
Merge remote-tracking branch 'origin/main' into security/safe-output-…
Copilot Aug 7, 2026
e4d30d7
Refresh branch with main and recompile workflows
Copilot Aug 7, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .changeset/patch-harden-safe-output-field-validation.md
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

29 changes: 29 additions & 0 deletions .github/workflows/agent-performance-analyzer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 10 additions & 0 deletions .github/workflows/agentic-token-audit.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 10 additions & 0 deletions .github/workflows/agentic-token-optimizer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

34 changes: 34 additions & 0 deletions .github/workflows/approach-validator.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

19 changes: 19 additions & 0 deletions .github/workflows/archie.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

15 changes: 15 additions & 0 deletions .github/workflows/archivx-agentic-workflows-analyzer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 10 additions & 0 deletions .github/workflows/audit-workflows.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions .github/workflows/avenger.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

10 changes: 10 additions & 0 deletions .github/workflows/changeset.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions .github/workflows/chaos-pr-bundle-fuzzer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions .github/workflows/ci-coach.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

19 changes: 19 additions & 0 deletions .github/workflows/ci-doctor.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

23 changes: 23 additions & 0 deletions .github/workflows/cloclo.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions .github/workflows/code-scanning-fixer.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

4 changes: 4 additions & 0 deletions .github/workflows/code-simplifier.lock.yml
View file
Open in desktop

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.

Loading
Loading