potiuk opened a new pull request, #13:
URL: https://github.com/apache/airflow-steward/pull/13
The .claude/settings.json this PR ships denies all of ~/ from the Bash
sandbox, with only a tiny allowRead allowlist. That set covers git/gh/uv but
not commit signing — git users on Linux who sign commits via gpg-agent (either
gpg-format or ssh-format with SSH_AUTH_SOCK pointing at gpg-agent's ssh-compat
socket) hit:
error: Couldn't get agent socket?
fatal: failed to write commit object
on the first commit attempt inside the sandboxed session, because ~/.gnupg/
and /run/user/<UID>/gnupg/ are both behind the denyRead.
Adds two entries to sandbox.filesystem.allowRead:
~/.gnupg/ # gpg keyring + trustdb
/run/user/*/gnupg/ # gpg-agent socket dir (the * is the UID)
Both are needed: the keyring so gpg can read the signing key material, the
runtime socket so gpg-agent / its ssh-compat s can be reached. The * glob in
the runtime path lets the same allowRead work for any UID — Claude Code's
sandbox allowRead supports glob wildcards.
The matching documentation block in secure-agent-setup.md is updated to
mirror the new entries with inline comments.
Generated-by: Claude Code (Claude Opus 4.7)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
