Skip to content

fix(ci): sandbox firewall fix + proactive network guard #1

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
fvegiard wants to merge 21 commits into
base: dev
Choose a base branch
from
Open

fix(ci): sandbox firewall fix + proactive network guard #1

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
21 commits
Select commit Hold shift + click to select a range
85859f3
fix(ci): make gh auth status non-fatal + disable telemetry in sandbox…
fvegiard Jun 21, 2026
e031810
feat(ci): add proactive network-firewall-guard workflow
fvegiard Jun 21, 2026
d7a6075
fix(ci): add OMO telemetry vars + remove em dash (reviewer feedback)
fvegiard Jun 21, 2026
f2d16ae
fix(ci): rewrite network-firewall-guard - no self-scan, recognize mit…
fvegiard Jun 21, 2026
aacdd2a
fix(guard): push=changed-only, value-check opt-outs, OMO_CODEX prefix…
fvegiard Jun 21, 2026
5ca9362
fix(guard): fix YAML parse error — use body-file instead of multi-lin…
fvegiard Jun 21, 2026
99ce0ec
test: register network-firewall-guard in workflow summary expectations
fvegiard Jun 21, 2026
6817c41
fix(guard): use full push range and scan guard file itself
fvegiard Jun 21, 2026
7b8a675
fix(guard): avoid self-scan false positives on comment and grep-patte…
fvegiard Jun 21, 2026
3731a0e
fix(guard): handle zero-SHA new-branch push + require both PostHog op…
fvegiard Jun 21, 2026
295d470
fix(guard): accept unquoted YAML opt-outs + add opt-outs to ci.yml la…
fvegiard Jun 21, 2026
c01f54d
fix(guard): case-sensitive posthog, exact grep-skip, OR mitigation
fvegiard Jun 21, 2026
ab92b7e
fix(guard): safe path iteration + require non-fatal || fallback
fvegiard Jun 21, 2026
cd32197
fix(locks): treat EPERM as lock contention on Windows
fvegiard Jun 21, 2026
be1feb0
fix(guard): persist-credentials false + full truthy/falsy opt-out values
fvegiard Jun 21, 2026
753172f
fix(guard): single-quote support, drop warn, anchor variable names
fvegiard Jun 21, 2026
38f11b6
fix(guard): remove self-triggering lowercase posthog/npx-lazycodex ph…
fvegiard Jun 21, 2026
348e411
fix(guard): address rounds 3-4 review comments
fvegiard Jun 21, 2026
20581ed
fix(guard): round-5 review — anchor fallbacks, restrict opt-outs, har…
fvegiard Jun 21, 2026
c9011d5
fix(guard): remove semicolon from gh auth fallback boundary
fvegiard Jun 21, 2026
3843463
chore: remove network-firewall-guard.yml
fvegiard Jun 21, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
3 changes: 3 additions & 0 deletions .github/workflows/ci.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -245,6 +245,9 @@ jobs:
HOME: ${{ runner.temp }}/lazycodex-published-smoke/home
CODEX_HOME: ${{ runner.temp }}/lazycodex-published-smoke/codex
CODEX_LOCAL_BIN_DIR: ${{ runner.temp }}/lazycodex-published-smoke/bin
OMO_CODEX_DISABLE_POSTHOG: "1"
OMO_DISABLE_POSTHOG: "1"
OMO_SEND_ANONYMOUS_TELEMETRY: "0"
run: |
set -euo pipefail
SMOKE_DIR=$(mktemp -d)
Expand Down
Loading
Loading