Skip to content

Tighten adaptor installation (release: CLI@1.38.5 worker@1.27.2)#1484

Merged
josephjclark merged 3 commits into
mainfrom
tighten-whitelist
Jul 20, 2026
Merged

Tighten adaptor installation (release: CLI@1.38.5 worker@1.27.2)#1484
josephjclark merged 3 commits into
mainfrom
tighten-whitelist

Conversation

@josephjclark

@josephjclark josephjclark commented Jul 16, 2026

Copy link
Copy Markdown
Collaborator

Short Description

Two small tweaks around adaptor installation:

  • Tighten the default adaptor whitelist used by the engine
  • Install adaptors with --ignore-scripts.

Claude seems to think that no adaptors rely on script execution, and reading around this is quite a rare thing nowadays becuase its a bit of a security hazard. So fairly comfortable that this is safe.

AI Usage

Please disclose whether you've used AI anywhere in this PR (it's cool, we just
want to know!):

  • I have used Claude Code
  • I have used another model
  • I have not used AI

You can read more details in our
Responsible AI Policy

@github-project-automation github-project-automation Bot moved this to New Issues in Core Jul 16, 2026
@josephjclark
josephjclark marked this pull request as ready for review July 16, 2026 09:44
@josephjclark josephjclark changed the title Tighten adaptor installation Tighten adaptor installation (release: CLI@1.38.5 worker@1.27.2) Jul 20, 2026
@josephjclark
josephjclark merged commit 9505a0d into main Jul 20, 2026
9 checks passed
@github-project-automation github-project-automation Bot moved this from New Issues to Done in Core Jul 20, 2026
@josephjclark
josephjclark deleted the tighten-whitelist branch July 20, 2026 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: Done

Development

Successfully merging this pull request may close these issues.

2 participants