Skip to content

fix: disable executable Git fsmonitor during repository analysis - #1

Merged
dRafaleD merged 1 commit into
mainfrom
codex/security-findings-20261016
Oct 16, 2026
Merged

dRafaleD merged 1 commit into
mainfrom
codex/security-findings-20261016

Conversation

@dRafaleD

Copy link
Copy Markdown
Owner

Repository analysis inherited core.fsmonitor from supplied Git metadata, allowing configured hooks to run during file enumeration. Override it for both Git subprocesses while preserving tracked/untracked and ignore behavior.

Validation: all 115 pytest cases passed, including a harmless configured-monitor fixture that must not execute. Ordinary fresh GitHub clones do not carry remote .git/config; the affected input is a supplied workspace with its Git metadata.

@dRafaleD
dRafaleD merged commit b184dbb into main Oct 16, 2026
10 checks passed
@dRafaleD
dRafaleD deleted the codex/security-findings-20261016 branch October 16, 2026 07:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant