hanzoai/team
2
0
Fork 0
mirror of https://github.com/hanzoai/team.git synced 2026-09-30 01:57:35 +00:00
Code Issues Releases Activity
23,162 Commits 160 Branches 1,580 Tags
master
Commit Graph
9 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Daniel SchallaandGitHub 95039b1874 Fix docs-impact-review CI hitting max turns limit (#35744) 
* Fix docs-impact-review hitting max turns by adding filesystem tools

The claude-code-action workflow instructs Claude to search ./docs/source/
for existing documentation, but only grants gh and MCP tools. Claude
repeatedly attempts filesystem access, gets denied, and exhausts the
30-turn limit. Add find, grep, cat, and ls to --allowedTools so the
docs checkout can actually be searched.

* Harden docs-impact-review against prompt-injection exfiltration

- Drop find from allowedTools (unsafe due to -exec)
- Scope ls, cat, grep to ./docs/source* paths only
- Add persist-credentials: false to both checkout steps to
  prevent token extraction from .git/config

* Use built-in Read/Glob/Grep tools instead of scoped Bash wrappers

Built-in tools cannot execute commands, chain via shell operators,
or abuse flags like -exec, making them inherently safer than any
Bash glob pattern for filesystem access.
 2026-03-23 21:57:24 +01:00
Daniel SchallaandGitHub 1acad3b0e5 Allow GH Bash Invocations (#35376) 2026-02-19 12:27:06 +00:00
Daniel SchallaandGitHub 6fcd242847 Fix PR Checkout (#35375) 2026-02-19 11:59:02 +00:00
Daniel SchallaandGitHub c2a370ec4b Fix Permission Request for Docs Agent (#35373) 2026-02-19 12:07:09 +01:00
Daniel SchallaandGitHub f9b01a4f93 Implementation of Documentation Impact Review Workflow via GH Actions (#35358) 
* Experiemntal Docs Agent

* Improve analysis section

* Remove PR Creation Features; Add some safety instructions

* Remove Safety Instructions after riskier operations were removed
 2026-02-18 20:13:51 +01:00
Daniel SchallaGitHubMattermost Build
 		0c4410f640 [MM-58560] Configurable session revocation during password resets (#27286) 
* [MM-58560] Allow for configurable session revocation during password reset

* Missing i18n additions

* Update Settings Wording

* Update Settings Wording #2

* Update default_config.ts for Session Termination

---------

Co-authored-by: Mattermost Build <[email protected]>
 2024-06-18 21:13:29 +02:00
Daniel SchallaGitHubMattermost Build
 		6fb844194b Update DockerFile to Ubuntu LTS Base Image (#22987) 
Co-authored-by: Mattermost Build <[email protected]>
 2023-04-25 14:59:31 +02:00
Daniel SchallaandGitHub 431797c2d9 [MM-49170] Implement Auditable Interface for Patch Post Struct (#21898) 
* Implement Auditable Function for Patch Post Endpoint

* Call auditable explicitly for patchPost patch parameter

* Delete audit-config.json

* Include HasReactions in Audit Log Entry for Patch
 2022-12-16 16:50:06 +01:00
Daniel SchallaandGitHub ac91327342 [CLD-4570] Disable CodeQL Auto Build (#21716) 
* Disable CodeQL Auto Build

* Update codeql-analysis.yml

* Separate Linux Build Targets
 2022-11-24 16:16:39 +05:30