Skip to content

fix: propagate config fields to all layers #6228

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
github-actions wants to merge 5 commits into from
Closed

fix: propagate config fields to all layers #6228

Changes from 1 commit
Commits
Show all changes
5 commits
Select commit Hold shift + click to select a range
f6dced2
fix: propagate security.legacySecurity and security.securityMode to s…
github-actions[bot] Jul 14, 2026
7e22265
Potential fix for pull request finding
lpcox Jul 15, 2026
769bf46
Merge remote-tracking branch 'origin/main' into fix/propagate-securit…
Copilot Jul 15, 2026
7706332
Merge branch 'main' into fix/propagate-security-mode-spec-mapping-7af…
lpcox Jul 15, 2026
1bb4ae1
chore: trigger CI checks
lpcox Jul 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 2 additions & 0 deletions docs/awf-config-spec.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -161,6 +161,8 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`).
- When both `apiProxy.targets.antigravity` and `apiProxy.targets.gemini` are set, `antigravity` takes precedence per field.
- `apiProxy.targets.vertex.host` → `--vertex-api-target`
- `apiProxy.targets.vertex.basePath` → `--vertex-api-base-path`
- `security.legacySecurity` → `--legacy-security` *(boolean; enables legacy/compat security mode; mutually exclusive with strict mode)*
Comment thread
Copilot marked this conversation as resolved.
Outdated
- `security.securityMode` → `--security-mode` *([DEPRECATED] Use `legacySecurity` instead. Accepted values: `"strict"` (default) or `"compat"`. `"compat"` is equivalent to `--legacy-security`.)*
- `security.sslBump` → `--ssl-bump`
- `security.enableDlp` → `--enable-dlp`
- `security.enableHostAccess` → `--enable-host-access`
Expand Down