bugs: verification gate runs the scanned repository's tests on an untrusted checkout #7787

Activity

1. kyle-sexton

   added

   needs-triageNot yet classified. Floor until a type and one priority tier are set.Not yet classified. Floor until a type and one priority tier are set.

   on Oct 17, 2026
2. github-actions commented on Oct 17, 2026

   

   github-actionsBot

   on Oct 17, 2026 – with GitHub Actions

   Contributor

   More actions

   Thanks for the report. Automated triage handed this issue to a maintainer.

   Proposed work class: work-class: structural
   Basis: automated intake triage; a maintainer confirms or changes it.

   _{Automated triage. A maintainer reviews it.}
3. github-actions

   added

   needs-humanHuman-in-the-loop required; autonomous sessions must not resolve items carrying this.Human-in-the-loop required; autonomous sessions must not resolve items carrying this.

   and removed

   needs-triageNot yet classified. Floor until a type and one priority tier are set.Not yet classified. Floor until a type and one priority tier are set.

   on Oct 17, 2026
4. github-actions

   added the

   Task

   issue type on Oct 17, 2026
5. kyle-sexton commented on Oct 18, 2026

   

   kyle-sexton

   on Oct 18, 2026

   MemberAuthor

   More actions

   Decision recorded.

   Question: The /bugs:scan verification gate runs the scanned repository's tests to mark a finding "reproduced". On an unattended run over an untrusted checkout, that executes untrusted code. Options: (a) unattended runs never execute scanned code, and attended runs do only after the person agrees; (b) run tests only in a sandbox with no network and no credentials; (c) keep current behavior.

   Owner's answer: (a) Unattended runs fall back to the existing verified-by-reading label. No CI workflow calls bugs:scan today, so the exposure is local loops and routines. Basis: plugins/bugs/skills/scan/context/verification-gate.md:78-84; scan SKILL.md:2, :64-65.

   The owner accepted this recommendation as item D32 of a 32-decision batch in an attended backlog-shaping session on 2026-10-18. The batch question: "Accept all 32 recommendations, including the four flagged above (D2 close the relearn, D26 cross-repo sync without per-repo confirm, D10 narrow hook, D23 delete guard only)?" The owner answered: "Accept all 32 (Recommended)".

   Posted by AI from the owner's answer in that session.
6. kyle-sexton

   added

   status: confirmedA maintainer confirmed the item is real and in scope; ready to be worked.A maintainer confirmed the item is real and in scope; ready to be worked.

   and removed

   needs-humanHuman-in-the-loop required; autonomous sessions must not resolve items carrying this.Human-in-the-loop required; autonomous sessions must not resolve items carrying this.

   on Oct 19, 2026