suede/.github/ at 0b226480758782346a9c15e257838dbc5bf557cc · taurean.bryant.land/suede · Tangled

taurean.bryant.land / suede

0

a template starter repo for sveltekit projects

0

suede / .github

1 folder

at 0b226480758782346a9c15e257838dbc5bf557cc

Taurean Bryant fix(ci): never load Pi config from the branch under review 3w ago

fix(ci): never load Pi config from the branch under review Security-review finding: gh pr checkout put the untrusted PR branch's .pi/ in Pi's discovery path, and --approve trusted it — a fork PR could ship a modified review skill or an extension and execute arbitrary code with the API-key secrets in env. Now the .pi/ process layer is snapshotted from main before the branch switch, Pi runs with --no-approve --no-extensions --no-skills --no-prompt-templates --no-context-files --tools read,bash, and the prompt directs it to the trusted snapshot, treating the working tree strictly as data under review. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

3 weeks ago