MediaMetz/gemini-cli
1
0
Fork 0
mirror of https://github.com/google-gemini/gemini-cli.git synced 2026-07-10 10:00:53 -07:00
Code Issues Packages Projects Releases Wiki Activity

Refactor: exclude transient CI configuration files from workspace context (#28216)

Browse Source
This commit is contained in:
David Pierce
2026-07-07 20:30:02 +00:00
committed by GitHub
parent 27a3da3e88
commit b7c61c9e3d
2 changed files with 29 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
packages/core/src/utils/workspaceContext.test.ts
+17
View File
@@ -523,6 +523,21 @@ describe('WorkspaceContext with optional directories', () => {
}
});
it('should reject GitHub Actions Workload Identity credentials', () => {
const workspaceContext = new WorkspaceContext(cwd);
const sensitivePaths = [
path.join(cwd, 'gha-creds-12345.json'),
path.join(cwd, 'gha-creds-abcde.json'),
path.join(cwd, 'GHA-CREDS-abcde.JSON'), // Case-insensitivity check
path.join(cwd, 'subfolder', 'gha-creds-12345.json'), // Nested
];
for (const p of sensitivePaths) {
expect(workspaceContext.isPathWithinWorkspace(p)).toBe(false);
}
});
it('should allow standard non-sensitive paths', () => {
const workspaceContext = new WorkspaceContext(cwd);
@@ -531,6 +546,8 @@ describe('WorkspaceContext with optional directories', () => {
path.join(cwd, '.gitignore'),
path.join(cwd, '.env.example'),
path.join(cwd, 'package.json'),
path.join(cwd, 'tsconfig.json'),
path.join(cwd, 'gha-creds.json'), // Doesn't match the pattern
];
for (const p of safePaths) {