ci: refuse bundled definitions that request the nonexistent gh merged field - #224

Merged

devantler merged 12 commits into

mainfrom

claude/gh-json-merged-guard-2581

Sep 20, 2026

Commits on Sep 19, 2026

ci: refuse a bundled definition that requests the nonexistent gh merged field

devantler
and
claude
committed
70167c9
fix(ci): keep newline-named surfaces whole and refuse unreadable ones

devantler
and
claude
committed
7244302
fix(ci): scan text references, refuse unscanned file types, and end a list at a closing quote

devantler
and
claude
committed
d128b4f
fix(ci): scan JSON keys and argv arrays, and keep a NUL from hiding a file's requests

devantler
and
claude
committed
deae4fe
fix(ci): join a backslash line break inside a field name and scan symlinked surfaces

devantler
and
claude
committed
6716f67
fix(ci): join only argv arrays, keeping other JSON array elements apart

devantler
and
claude
committed
c07c2ca
fix(ci): refuse a non-regular surface and exempt reviewed allow-listed files

devantler
and
claude
committed
2b442d5
fix(ci): use an if statement so shellcheck does not read a fallback as else

devantler
and
claude
committed
852c506
fix(ci): read a shell-quoted flag and refuse a discovery that failed part way

devantler
and
claude
committed
5b4f8a2
fix(ci): bind an exemption to the exact request and refuse a stale one

devantler
and
claude
committed
19273ec
fix(ci): bind an exemption to the reviewed file content and name a per-command remedy

devantler
and
claude
committed
35b94f8

Commits on Sep 20, 2026

fix(ci): validate complete allowlist digests
devantler
committed
36206eb