Repository navigation
feat(config): add secure configuration management commands - #78
Merged
Merged
Conversation
benbenbang
enabled auto-merge (rebase)
October 9, 2026 08:24
benbenbang
force-pushed
the
feature/30-config-editor
branch
from
October 9, 2026 08:31
7bf057b to
9d19999
Compare
github-actions
Bot
added
documentation
Add `config edit` with explicit editor override, selected TOML editor support, and Vim on PATH as the default. Execute the editor directly without shell or argument parsing, passing the absolute selected filename as one argument and forwarding terminal streams through the command context. Reject missing, nonregular, and final-symlink targets, while allowing Vim repair of invalid TOML and explicit-editor repair of invalid, mistyped, or oversized configuration files. Ignore `EDITOR`, `VISUAL`, and decision timeouts, and bound post-exit pipe waits without managing descendants. Document the security boundaries and cover editor selection, repair, process errors, pipe handling, native smoke tests, full gates, and race tests.
benbenbang
force-pushed
the
feature/30-config-editor
branch
from
October 9, 2026 08:35
9d19999 to
3cd1871
Compare
|
🎉 This PR is included in version 1.4.0 🎉 The release is available on GitHub release Your semantic-release bot 📦🚀 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Provide safe, predictable configuration workflows while preventing accidental credential exposure and unsafe file access.
jevwise.tomlfiles with explicit-path and precedence rules, bounded reads, strict file validation, and no unsafe fallback or ancestor searching.config init,config view, andconfig editfor global, local, and explicit configurations without overwriting files or copying credentials from flags or the environment.