Filter Runner-Guard RGS-012 false positives for local Copilot allow-tools - #54341

Merged

pelikhan merged 8 commits into

mainfrom

copilot/rgs-012-fix-secret-exfiltration-another-one

Aug 21, 2026

Commits on Aug 20, 2026

Initial plan
Copilot
authored
4078cd7
fix: filter runner-guard local copilot allow-tool false positive

Copilot
and
pelikhan
authored
2ce893c
docs(adr): add draft ADR-54341 for RGS-012 false positive filter
github-actions[bot]
authored
77c9ab4
Merge branch 'main' into copilot/rgs-012-fix-secret-exfiltration-another-one
github-actions[bot]
authored
7eae2ed
fix: reject curl outside allow-tool values and fix IPv6 host parsing

Copilot
and
pelikhan
authored
3c94815
docs(adr): record curl-outside-allow-tool and IPv6 safety refinements

Copilot
and
gh-aw-bot
authored
d9ba5e2

Commits on Aug 21, 2026

fix: make runner_guard error messages actionable for errormessage linter

Copilot
and
pelikhan
authored
1c5c0e5
docs: clarify verbose flag in runner-guard exit code error

Copilot
and
pelikhan
authored
98b8387