Skip to content

Pin the factory config at run start - #89

Merged
Param-Harrison merged 1 commit into
mainfrom
fix/pin-portable-config
Oct 30, 2026
Merged

Param-Harrison merged 1 commit into
mainfrom
fix/pin-portable-config

Conversation

@Param-Harrison

Copy link
Copy Markdown
Contributor

A security review found .factory/config.yaml was read lazily from the working tree, so a build step that edited it could change the commands the gate runs. runIssue now loads and pins it before the first agent call. The test rewrites the file after pinning and asserts the commands do not change.

🤖 Generated with Claude Code

… commands

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@Param-Harrison
Param-Harrison merged commit e193fc7 into main Oct 30, 2026
11 checks passed
@Param-Harrison
Param-Harrison deleted the fix/pin-portable-config branch October 30, 2026 22:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant