3 people c17b941ac3 fix: expand ${CWD}/${HOME}/${TMPDIR} in --sandbox-allow path overrides (#344) ...

The runtime --sandbox-allow CLI override path never expanded the supported
sandbox variables (${CWD}, ${HOME}, ${TMPDIR}), so a value like
write='${CWD}/**' was treated as a literal path segment and the allow rule
never matched. Profile-loaded sandbox paths already expand these via
sandbox/util.ExpandVariables.

Expand the variables in resolveToAbsolute, the shared chokepoint for
read/write/exec overrides, before resolving to an absolute path. Glob
characters are preserved through expansion and filepath.Clean.

Fixes #257

Co-authored-by: Matt Van Horn <455140+mvanhorn@users.noreply.github.com>

2026-06-18 12:17:33 +05:30

..

cloud_auto_sync_test.go

feat: Add Support for Optimistic Cloud Sync (#273)

2026-05-20 13:56:50 +05:30

cobra_test.go

fix: Opt-in lockdown for global config (#278)

2026-05-21 16:37:26 +05:30

cobra.go

fix: Opt-in lockdown for global config (#278)

2026-05-21 16:37:26 +05:30

config_template_test.go

Add config support for disabling telemetry (#226)

2026-04-22 22:04:56 +05:30

config_test.go

fix: flatten proxy skip_commands schema and move docs to proxy-mode.md (#241)

2026-05-06 19:26:39 +05:30

config.go

feat(analyzer): analysis cache contract (MalysisCache interface + config) (#334)

2026-06-17 15:07:47 +05:30

config.template.yml

feat(analyzer): analysis cache contract (MalysisCache interface + config) (#334)

2026-06-17 15:07:47 +05:30

cooldown_skip_test.go

feat(cooldown): add dependency_cooldown.skip list (per-control exemption) (#328)

2026-06-15 19:44:55 +05:30

managed_config_test.go

fix: Opt-in lockdown for global config (#278)

2026-05-21 16:37:26 +05:30

sandbox_allow_test.go

fix: expand ${CWD}/${HOME}/${TMPDIR} in --sandbox-allow path overrides (#344)

2026-06-18 12:17:33 +05:30

sandbox_allow.go

fix: expand ${CWD}/${HOME}/${TMPDIR} in --sandbox-allow path overrides (#344)

2026-06-18 12:17:33 +05:30

sandbox_paths_test.go

feat: Add support for per-project sandbox overlays (#294)

2026-05-26 21:06:57 +05:30

sandbox_policy_for_test.go

feat: Add support for environment protection (scrubbing) (#327)

2026-06-11 11:40:33 +05:30

trusted_test.go

fix: Proxy flow should respect trusted packages (#96)

2026-01-08 00:15:02 +05:30

trusted.go

feat(cooldown): add dependency_cooldown.skip list (per-control exemption) (#328)

2026-06-15 19:44:55 +05:30

viper_env_test.go

feat: add pmg config get/set/edit CLI commands (#262)

2026-05-16 09:55:54 +05:30

viper.go

fix: Opt-in lockdown for global config (#278)

2026-05-21 16:37:26 +05:30

yaml_set_test.go

feat: add pmg config get/set/edit CLI commands (#262)

2026-05-16 09:55:54 +05:30

yaml_set.go

fix: MacOS MDM based Deployment (#277)

2026-05-21 14:32:30 +05:30