ci: enable network for exec runs via -c sandbox_workspace_write.network_access=true; keep workspace-write and git writes opt-in

This commit is contained in:
James Peter
2025-09-06 23:30:58 +10:00
parent 87ae88cfe8
commit 510c323b9e
2 changed files with 4 additions and 1 deletions
+1
View File
@@ -468,6 +468,7 @@ jobs:
npx -y @just-every/code@latest \
exec \
-s "$CODE_SANDBOX" \
-c sandbox_workspace_write.network_access=true \
--cd "$GITHUB_WORKSPACE" \
--skip-git-repo-check \
- | tee .github/auto/AGENT_STDOUT.txt
+3 -1
View File
@@ -173,7 +173,9 @@ jobs:
npm_config_cache="$SAFE_HOME/.npm" \
npx -y @just-every/code@latest \
exec \
-s workspace-write -c sandbox_workspace_write.allow_git_writes=true \
-s workspace-write \
-c sandbox_workspace_write.allow_git_writes=true \
-c sandbox_workspace_write.network_access=true \
--cd "$GITHUB_WORKSPACE" \
--skip-git-repo-check \
- | tee .github/auto/AGENT_STDOUT.txt