feat: safe update mode warning prompt for secrets and actions (#safe-update) - #24968

Merged

pelikhan merged 26 commits into

mainfrom

copilot/update-compiler-safe-update-mode

Apr 7, 2026

Commits on Apr 6, 2026

feat: add safe update mode enforcement for secrets

Copilot
and
pelikhan
authored
d653dff
refactor: use body secrets from generateYAML in safe update enforcement

Copilot
and
pelikhan
authored
97077a4
fix: improve log/error messages for safe update manifest failures

Copilot
and
pelikhan
authored
62b451e

Commits on Apr 7, 2026

fix: rename to gh-aw-manifest and restrict safe-update to CLI only

Copilot
and
pelikhan
authored
0f5648f
chore: plan – extend safe-update to enforce action changes

Copilot
and
pelikhan
authored
c68b82c
feat: extend safe-update enforcement to also check action changes

Copilot
and
pelikhan
authored
9b72aff
feat: enforce safe-update on first compile when no prior lock file exists

Copilot
and
pelikhan
authored
eb89621
feat: add safe-update feature flag support and exempt actions/* org from enforcement

Copilot
and
pelikhan
authored
ee3ad48
feat: read lock file manifest from git HEAD to prevent local tampering

Copilot
and
pelikhan
authored
e7c9a1c
fix: use filepath.Join for path construction and fix %q double-quoting in log message

Copilot
and
pelikhan
authored
cf555d1
feat: gate ReadFileFromHEAD tamper prevention to dev mode only

Copilot
and
pelikhan
authored
2896b9d
fix: add missing log message when lock file not found in filesystem (non-dev mode)

Copilot
and
pelikhan
authored
48e2078
fix: address review comments — doc accuracy, path-traversal guard, log/help text

Copilot
and
pelikhan
authored
e73e17a
test(integration): add safe-update integration tests for secret and action enforcement

Copilot
and
pelikhan
authored
f9994c5
style: use 0o644 octal prefix for file permissions in integration tests

Copilot
and
pelikhan
authored
973a8e4
test(integration): add transitive import tests verifying manifest captures full secrets/actions closure

Copilot
and
pelikhan
authored
1732fe0
fix(tests): address code review - safe array bounds check in log statements

Copilot
and
pelikhan
authored
dd0b544
feat: change safe-update from hard error to warning prompt, apply to all modes

Copilot
and
pelikhan
authored
00971bd
Merge remote-tracking branch 'origin/main' into copilot/update-compiler-safe-update-mode

Copilot
and
pelikhan
authored
b2c5228
chore: merge main and recompile workflows

Copilot
and
pelikhan
authored
0ff2ccb
feat: pre-cache lock.yml manifests at MCP server startup for tamper-proof safe update enforcement

Copilot
and
pelikhan
authored
12afa1c
refactor: tie safe update mode to strict mode, remove SafeUpdateFeatureFlag

Copilot
and
pelikhan
authored
21b4501
refactor: fix stale comment in compile_compiler_setup.go (code review consistency)

Copilot
and
pelikhan
authored
4447e34
refactor: drop secrets. prefix from manifest secret storage

Copilot
and
pelikhan
authored
65c42f9
docs: clarify normalizeSecretName and secretNames comment

Copilot
and
pelikhan
authored
93d22d5
chore: recompile all workflows

Copilot
and
pelikhan
authored
4dc85a1

Navigation Menu

Uh oh!

feat: safe update mode warning prompt for secrets and actions (#safe-update) - #24968

feat: safe update mode warning prompt for secrets and actions (#safe-update)#24968
pelikhan merged 26 commits into
mainfrom
copilot/update-compiler-safe-update-mode

Commits on Apr 6, 2026

feat: add safe update mode enforcement for secrets

refactor: use body secrets from generateYAML in safe update enforcement

fix: improve log/error messages for safe update manifest failures

Commits on Apr 7, 2026

fix: rename to gh-aw-manifest and restrict safe-update to CLI only

chore: plan – extend safe-update to enforce action changes

feat: extend safe-update enforcement to also check action changes

feat: enforce safe-update on first compile when no prior lock file exists

feat: add safe-update feature flag support and exempt actions/* org from enforcement

feat: read lock file manifest from git HEAD to prevent local tampering

fix: use filepath.Join for path construction and fix %q double-quoting in log message

feat: gate ReadFileFromHEAD tamper prevention to dev mode only

fix: add missing log message when lock file not found in filesystem (non-dev mode)

fix: address review comments — doc accuracy, path-traversal guard, log/help text

test(integration): add safe-update integration tests for secret and action enforcement

style: use 0o644 octal prefix for file permissions in integration tests

test(integration): add transitive import tests verifying manifest captures full secrets/actions closure

fix(tests): address code review - safe array bounds check in log statements

feat: change safe-update from hard error to warning prompt, apply to all modes

Merge remote-tracking branch 'origin/main' into copilot/update-compiler-safe-update-mode

chore: merge main and recompile workflows

feat: pre-cache lock.yml manifests at MCP server startup for tamper-proof safe update enforcement

refactor: tie safe update mode to strict mode, remove SafeUpdateFeatureFlag

refactor: fix stale comment in compile_compiler_setup.go (code review consistency)

refactor: drop secrets. prefix from manifest secret storage

docs: clarify normalizeSecretName and secretNames comment

chore: recompile all workflows