potiuk opened a new pull request, #17:
URL: https://github.com/apache/airflow-steward/pull/17
## Summary
- Adds a Claude Code `PreToolUse` hook
(`tools/agent-isolation/sandbox-bypass-warn.sh`) that prints a bold-red banner
whenever the model invokes Bash with `dangerouslyDisableSandbox: true`.
Belt-and-braces visibility for the existing permission prompt — does not block,
just makes the bypass impossible to skim past.
- Adds two sections to `secure-agent-setup.md` documenting (1) installing
the hook user-scope so it fires in every session on the host, and (2) keeping
the user-scope pieces (hook script, personal `CLAUDE.md`, optional global
`claude-iso.sh`) in lockstep across machines via a private dotfile-style repo.
- Adds two steps to "Adopter setup" linking to both new sections.
## Test plan
- [ ] `bash -n tools/agent-isolation/sandbox-bypass-warn.sh` parses cleanly.
- [ ] Hook positive path — emits red banner, exits 1:
```bash
echo '{"tool_name":"Bash","tool_input":{"command":"ls
~/.aws","description":"check creds","dangerouslyDisableSandbox":true}}' \
| tools/agent-isolation/sandbox-bypass-warn.sh; echo "exit=$?"
```
- [ ] Hook negative path — silent, exits 0:
```bash
echo '{"tool_name":"Bash","tool_input":{"command":"ls /tmp"}}' \
| tools/agent-isolation/sandbox-bypass-warn.sh; echo "exit=$?"
```
- [ ] `secure-agent-setup.md` and `tools/agent-isolation/README.md` render
correctly on GitHub (table cells, code blocks, internal anchors).
- [ ] Re-run `doctoc secure-agent-setup.md` before merging — the new H2/H3
headings need to land in the auto-generated TOC.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
