Fix dangling determine-automatic-lockdown step reference in static enclave sink-visibility policy - #60338

Merged

lpcox merged 9 commits into

mainfrom

copilot/fix-static-enclave-write-sink-references

Sep 11, 2026

Commits on Sep 11, 2026

Initial plan
Copilot
authored
cccdfea
Fix dangling determine-automatic-lockdown reference for static enclave sink-visibility

Copilot
and
lpcox
authored
b458fe2
Address code review feedback: scope regex and clarify guard-policy exclusions

Copilot
and
lpcox
authored
6658113
Extract shared githubBackendIsEnclaveOnly helper; remove stray test artifact

Copilot
and
lpcox
authored
66cdcf4
Use staticEnclaveWriteSinkGuardPolicy predicate directly to keep step gen/reference in sync

Copilot
and
lpcox
authored
ba848b6
Name step-id indent constant with explanatory comment for regression test

Copilot
and
lpcox
authored
f4769af
Simplify sink-visibility gating to reuse shared enclave-only helper

Copilot
and
lpcox
authored
913af05
Document why step-generation uses precise predicates instead of githubBackendIsEnclaveOnly

Copilot
and
lpcox
authored
3cf8736
Scope dangling step-output assertions to each job

Copilot
and
lpcox
authored
336af10