🛡️ Sentinel: [MEDIUM] sandboxed_web_e2e.py의 subprocess 호출에 shell=False 명시

.github/workflows/agent-mention-router-quality-ci.yml

@@ -44,7 +44,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Harden runner
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout exact head with comparison history

.github/workflows/audit-central-ruleset.yml

@@ -27,7 +27,7 @@ jobs:
       GH_TOKEN: ${{ secrets.PR_REVIEW_MERGE_TOKEN || secrets.OPENCODE_APPROVE_TOKEN || github.token }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 

.github/workflows/codeql-pr.yml

@@ -79,7 +79,7 @@ jobs:
       matrix: ${{ fromJSON(needs.detect-languages.outputs.matrix) }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -186,7 +186,7 @@ jobs:
       matrix: ${{ fromJSON(needs.detect-languages.outputs.matrix) }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 

.github/workflows/hourly-nvidia-nim-review-repair.yml

@@ -15,7 +15,6 @@ on:
       - .github/workflows/hourly-nvidia-nim-review-repair.yml
       - .github/workflows/nonnest2-hourly-review-repair.yml
       - .github/workflows/originweave-hourly-review-repair.yml
-      - .github/workflows/quarantine-sandbox-hourly-review-repair.yml
       - scripts/ci/pr_review_conflict_scope.py
       - scripts/ci/pr_review_autofix_context.py
       - tests/test_bandscope_hourly_review_caller.py
@@ -26,7 +25,6 @@ on:
       - tests/test_hourly_scheduler_runtime_budget.py
       - tests/test_nonnest2_hourly_review_caller.py
       - tests/test_originweave_hourly_review_caller.py
-      - tests/test_quarantine_sandbox_hourly_review_caller.py
       - tests/test_hourly_autofix_context_quality_gate.py
       - tests/test_pr_review_conflict_scope.py
       - tests/test_pr_review_conflict_scope_control_files.py
@@ -50,7 +48,6 @@ on:
       - docs/doctoring/hourly-nvidia-nim-autofix.md
       - docs/doctoring/nonnest2-hourly-review-caller.md
       - docs/doctoring/originweave-hourly-review-caller.md
-      - docs/doctoring/quarantine-sandbox-hourly-review-caller.md
   push:
     paths:
       - .github/workflows/pr-review-fix-scheduler.yml
@@ -65,7 +62,6 @@ on:
       - .github/workflows/hourly-nvidia-nim-review-repair.yml
       - .github/workflows/nonnest2-hourly-review-repair.yml
       - .github/workflows/originweave-hourly-review-repair.yml
-      - .github/workflows/quarantine-sandbox-hourly-review-repair.yml
       - scripts/ci/pr_review_conflict_scope.py
       - scripts/ci/pr_review_autofix_context.py
       - tests/test_bandscope_hourly_review_caller.py
@@ -76,7 +72,6 @@ on:
       - tests/test_hourly_scheduler_runtime_budget.py
       - tests/test_nonnest2_hourly_review_caller.py
       - tests/test_originweave_hourly_review_caller.py
-      - tests/test_quarantine_sandbox_hourly_review_caller.py
       - tests/test_hourly_autofix_context_quality_gate.py
       - tests/test_pr_review_conflict_scope.py
       - tests/test_pr_review_conflict_scope_control_files.py
@@ -100,7 +95,6 @@ on:
       - docs/doctoring/hourly-nvidia-nim-autofix.md
       - docs/doctoring/nonnest2-hourly-review-caller.md
       - docs/doctoring/originweave-hourly-review-caller.md
-      - docs/doctoring/quarantine-sandbox-hourly-review-caller.md
 
 permissions:
   contents: read
@@ -156,7 +150,6 @@ jobs:
             tests/test_hourly_scheduler_runtime_budget.py \
             tests/test_nonnest2_hourly_review_caller.py \
             tests/test_originweave_hourly_review_caller.py \
-            tests/test_quarantine_sandbox_hourly_review_caller.py \
             tests/test_pr_review_conflict_scope_control_files.py \
             tests/test_hourly_autofix_context_quality_gate.py \
             tests/test_pr_review_conflict_scope_git_executable.py \

.github/workflows/pr-review-autofix.yml

@@ -35,7 +35,7 @@ jobs:
       REPAIR_MODE: ${{ github.event.client_payload.repair_mode || 'review' }}
     steps:
       - name: Harden runner
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 

.github/workflows/pr-review-merge-scheduler.yml

@@ -773,14 +773,6 @@ jobs:
             echo "::error::ORG_SWEEP_MAX_UNAVAILABLE must be a non-negative integer; got '${ORG_SWEEP_MAX_UNAVAILABLE}'. Fix the ORG_SWEEP_MAX_UNAVAILABLE repository variable."
             exit 1
           fi
-          if ! [[ "$ORG_SWEEP_REVIEW_DISPATCH_LIMIT" =~ ^(-1|[0-9]+)$ ]]; then
-            echo "::error::ORG_SWEEP_REVIEW_DISPATCH_LIMIT must be -1 or a non-negative integer; got '${ORG_SWEEP_REVIEW_DISPATCH_LIMIT}'. Fix the ORG_SWEEP_REVIEW_DISPATCH_LIMIT repository variable."
-            exit 1
-          fi
-          if ! [[ "$ORG_SWEEP_BRANCH_UPDATE_LIMIT" =~ ^(-1|[0-9]+)$ ]]; then
-            echo "::error::ORG_SWEEP_BRANCH_UPDATE_LIMIT must be -1 or a non-negative integer; got '${ORG_SWEEP_BRANCH_UPDATE_LIMIT}'. Fix the ORG_SWEEP_BRANCH_UPDATE_LIMIT repository variable."
-            exit 1
-          fi
 
           repositories_json="$(
             gh api \
@@ -800,11 +792,6 @@ jobs:
           failures=0
           unavailable=0
           unavailable_repos=()
-          # These are organization-wide budgets. They must be consumed across
-          # the repository loop, not reset for every target repository; resetting
-          # them here can enqueue hundreds of long-running review jobs per sweep.
-          org_review_dispatches_used=0
-          org_branch_updates_used=0
           for target in "${sweep_targets[@]}"; do
             repo_full_name="${target%%$'\t'*}"
             default_branch="${target##*$'\t'}"
@@ -832,31 +819,14 @@ jobs:
               *) project_flow="github-flow" ;;
             esac
 
-            if [ "$ORG_SWEEP_REVIEW_DISPATCH_LIMIT" = "-1" ]; then
-              review_dispatch_limit=-1
-            else
-              review_dispatch_limit=$((ORG_SWEEP_REVIEW_DISPATCH_LIMIT - org_review_dispatches_used))
-              if (( review_dispatch_limit < 0 )); then
-                review_dispatch_limit=0
-              fi
-            fi
-            if [ "$ORG_SWEEP_BRANCH_UPDATE_LIMIT" = "-1" ]; then
-              branch_update_limit=-1
-            else
-              branch_update_limit=$((ORG_SWEEP_BRANCH_UPDATE_LIMIT - org_branch_updates_used))
-              if (( branch_update_limit < 0 )); then
-                branch_update_limit=0
-              fi
-            fi
-
             args=(
               --repo "$repo_full_name"
               --base-branch "$default_branch"
               --project-flow "$project_flow"
               --max-prs "$ORG_SWEEP_MAX_PRS"
               --review-workflow "Required OpenCode Review"
-              --review-dispatch-limit "$review_dispatch_limit"
-              --branch-update-limit "$branch_update_limit"
+              --review-dispatch-limit "$ORG_SWEEP_REVIEW_DISPATCH_LIMIT"
+              --branch-update-limit "$ORG_SWEEP_BRANCH_UPDATE_LIMIT"
               --stale-opencode-minutes "$STALE_OPENCODE_MINUTES"
               --merge-mode "$ORG_SWEEP_MERGE_MODE"
             )
@@ -877,11 +847,6 @@ jobs:
             sweep_rc=$?
             set -e
             printf '%s\n' "$sweep_output"
-            repo_review_dispatches="$(printf '%s\n' "$sweep_output" | grep -Ec '^PR #[0-9]+: (review_dispatch|security_dispatch):' || true)"
-            repo_branch_updates="$(printf '%s\n' "$sweep_output" | grep -Ec '^PR #[0-9]+: (update_branch|restamp_head):' || true)"
-            org_review_dispatches_used=$((org_review_dispatches_used + repo_review_dispatches))
-            org_branch_updates_used=$((org_branch_updates_used + repo_branch_updates))
-            echo "Org sweep budget consumed: review dispatches=${org_review_dispatches_used}/${ORG_SWEEP_REVIEW_DISPATCH_LIMIT}, branch updates=${org_branch_updates_used}/${ORG_SWEEP_BRANCH_UPDATE_LIMIT}."
             if [ "$sweep_rc" -ne 0 ]; then
               # A structural access denial ("Resource not accessible by
               # integration") means the sweep credential cannot read this

.github/workflows/python-security.yml

@@ -90,7 +90,7 @@ jobs:
       actions: read
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout
@@ -215,7 +215,7 @@ jobs:
       contents: read
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout

.github/workflows/sast-semgrep.yml

@@ -58,7 +58,7 @@ jobs:
       SEMGREP_SEND_METRICS: "off"
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout

.github/workflows/scheduled-security-scan.yml

@@ -82,7 +82,7 @@ jobs:
       matrix: ${{ fromJSON(needs.detect-languages.outputs.matrix) }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout
@@ -109,7 +109,7 @@ jobs:
       actions: read
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout

.github/workflows/secret-scan.yml

@@ -55,7 +55,7 @@ jobs:
       GITLEAKS_SHA256: "551f6fc83ea457d62a0d98237cbad105af8d557003051f41f3e7ca7b3f2470eb"
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
       - name: Checkout (full history for schedule/push, base+head for PR)

.github/workflows/strix.yml

@@ -112,7 +112,7 @@ jobs:
       FORCE_JAVASCRIPT_ACTIONS_TO_NODE24: true
     steps:
       - name: Harden runner
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
           disable-file-monitoring: true

.github/workflows/trusted-uv-materializer-quality-ci.yml

@@ -43,7 +43,7 @@ jobs:
     timeout-minutes: 10
     steps:
       - name: Harden runner
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 
@@ -89,7 +89,7 @@ jobs:
     timeout-minutes: 20
     steps:
       - name: Harden runner
-        uses: step-security/harden-runner@b09bb98e06d4d774595224525879c09bc6e98c40 # v2.20.1
+        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
         with:
           egress-policy: audit
 

.jules/sentinel.md

@@ -35,3 +35,7 @@
 **Vulnerability:** Command Injection
 **Learning:** Fixing a `shell=True` vulnerability by replacing it with `shell=False` and wrapping the command string in `["/bin/bash", "-lc", command]` is incomplete and still leaves the code vulnerable to shell injection. It acts as security theater, as it misleads linters while executing untrusted input via the bash wrapper. The vulnerability was still present in `sandboxed_web_e2e.py`.
 **Prevention:** Remove `/bin/bash` wrapper from `subprocess` calls in CI scripts. Always use `shlex.split(command)` to safely parse strings into a list of arguments and pass the list directly to `subprocess.Popen` or `subprocess.run`.
+## 2026-08-20 - Prevent SSRF via Readiness URL Validation
+**Vulnerability:** Server-Side Request Forgery (SSRF) / Internal Network Scanning
+**Learning:** Functions designed to poll "readiness" URLs (like `wait_for_url` in CI scripts) can be manipulated to scan internal networks or cloud metadata APIs if they only validate the URL scheme (`http`/`https`) and neglect to restrict the host. A malicious payload can supply an internal IP, and the script will confirm its existence or status.
+**Prevention:** When implementing readiness probes or fetching dynamically provided URLs to verify service availability, explicitly restrict the allowed hostnames to localhost (`localhost`, `127.0.0.1`, `::1`) using `urllib.parse.urlparse` to prevent SSRF vulnerabilities and internal network scanning.

ARCHITECTURE.md

@@ -118,8 +118,6 @@ trusted `uv` exporter is downloaded from the literal GitHub Releases URL for
   ecosystem.
 - [`docs/agent-github-project-protocol.md`](docs/agent-github-project-protocol.md)
   — Project #1 operation.
-- [`docs/pr-review-and-merge-procedure.md`](docs/pr-review-and-merge-procedure.md)
-  — bot/agent exact-head review and merge procedure.
 - [`PR_GOVERNANCE_AUDIT.md`](PR_GOVERNANCE_AUDIT.md) — live review/merge
   contract.
 - [`docs/doctoring/hourly-nvidia-nim-autofix.md`](docs/doctoring/hourly-nvidia-nim-autofix.md)