Files
viyatb-oai 9f6879944e fix: restrict bot permission bypass (#89)
## Summary
- stop treating every `[bot]` actor as trusted when `allow-bots` is
enabled
- add `allow-bot-users` for explicit custom bot allowlists without
wildcard support
- document bot allowlist semantics and add CLI regression tests

## Test plan
- `pnpm run check`
- `pnpm test`
- `git diff --check`
2026-04-24 17:14:19 -07:00

25 lines
872 B
JSON

{
"name": "@openai/codex-action",
"version": "0.0.0",
"description": "GitHub Action to run codex exec via the Codex CLI with accompanying helper steps",
"private": true,
"scripts": {
"build": "esbuild src/main.ts --sourcemap=inline --format=cjs --bundle --platform=node --target=node20 --outdir=dist",
"check": "tsc --noEmit",
"test": "pnpm run build && node --test test/*.test.mjs"
},
"dependencies": {
"@actions/core": "^1.11.1",
"@octokit/graphql": "^8.2.2",
"@octokit/rest": "^21.1.1",
"commander": "14.0.1",
"string-argv": "0.3.2"
},
"devDependencies": {
"@types/node": "^20.12.7",
"esbuild": "^0.23.0",
"typescript": "^5.4.5"
},
"packageManager": "[email protected]+sha512.10568bb4a6afb58c9eb3630da90cc9516417abebd3fabbe6739f0ae795728da1491e9db5a544c76ad8eb7570f5c4bb3d6c637b2cb41bfdcdb47fa823c8649319"
}