fix(ci): make autofix verification gates hermetic to runner git config - #8961

Merged

wenshao merged 8 commits into

mainfrom

fix/autofix-hermetic-git-config

Aug 13, 2026

Commits on Aug 12, 2026

fix(ci): make autofix verification gates hermetic to runner git config
wenshao
committed
ef871f3
fix(ci): widen the config scrub and re-sanitize before PAT-bearing steps
wenshao
committed
1213ee8
fix(ci): close the XDG/env/transport bypasses around the config scrub
wenshao
committed
e0031b8
fix(ci): take PAT git steps off host scopes and close the env channels
wenshao
committed
e7cb3b4
fix(ci): pin PATH, seal repo-redirect and env channels, harden all PAT sites
wenshao
committed
1cfa5e0
fix(ci): pin gh env channels, harmonize allowlist subsection slots
wenshao
committed
aff0a97

Commits on Aug 13, 2026