Skip to content

Guard against agent git operations that require a branch-rule bypass#449

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
ptr727 merged 13 commits into from
Jul 26, 2026
Merged

Guard against agent git operations that require a branch-rule bypass #449

Changes from all commits
Commits
Show all changes
13 commits
Select commit Hold shift + click to select a range
960d25a
Guard against agent git operations that require a branch-rule bypass
ptr727 Jul 25, 2026
3efc519
Stop Rule 4 parsing at redirections and fold line-continuations
ptr727 Jul 25, 2026
7d4642f
Ignore a push mentioned inside a quoted argument
ptr727 Jul 25, 2026
5eb5b27
Tokenize with shlex, encode the branch, generic maintainer wording
ptr727 Jul 25, 2026
5a1af14
Skip git global options when detecting a push
ptr727 Jul 25, 2026
2398731
Handle --all/--mirror/--tags pushes in Rule 4
ptr727 Jul 25, 2026
54abec3
Tokenize with shell-operator awareness and parse every push
ptr727 Jul 25, 2026
e0fdd5c
Recognize git invoked by absolute path or .exe
ptr727 Jul 25, 2026
51ea3d2
Treat --follow-tags as a branch push, not tags-only
ptr727 Jul 25, 2026
1b50ea3
Gate --no-verify to git, fix a stale comment reference
ptr727 Jul 25, 2026
2d8f92c
Generalize subcommand detection so commit honors git global options
ptr727 Jul 25, 2026
c63d6df
Resolve origin only when a push exists; clarify the fail-closed reason
ptr727 Jul 25, 2026
6e05291
Skip redirections in argv so leading ones do not hide push targets
ptr727 Jul 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Loading