@biffo/cli 0.253.7 → 0.253.8
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -89,9 +89,21 @@ fi
|
|
|
89
89
|
# branches are fine, and noise kills a gate. Measured on a branch that DOES
|
|
90
90
|
# name one: the added latency is the cost of two `gh` lookups, similar in
|
|
91
91
|
# order of magnitude to `rewrite-scope-check` above.
|
|
92
|
+
#
|
|
93
|
+
# BIFFO_SKIP_CLAIM_GUARD -- narrow, claim-only escape hatch (#1327). Before
|
|
94
|
+
# this, the only documented way past a false positive here was
|
|
95
|
+
# BIFFO_SKIP_VERIFY at the top of this file, which does not target the claim
|
|
96
|
+
# guard: it skips the WHOLE gate -- ruff, pyright, bandit, gitleaks,
|
|
97
|
+
# rewrite-scope, this guard, everything. An agent reading "skip the claim
|
|
98
|
+
# guard" reasonably reaches for the only hatch documented and gets "skip
|
|
99
|
+
# everything" instead; one did, in the session #1327 was filed from. This
|
|
100
|
+
# variable bypasses exactly the `claim --guard` call below and nothing else --
|
|
101
|
+
# rewrite-scope-check, the pg-test block gate and `verify` all still run.
|
|
92
102
|
branch=$(git symbolic-ref --quiet --short HEAD) || branch=""
|
|
93
103
|
|
|
94
|
-
if [ -n "$
|
|
104
|
+
if [ -n "${BIFFO_SKIP_CLAIM_GUARD:-}" ]; then
|
|
105
|
+
echo "pre-push: claim guard skipped (BIFFO_SKIP_CLAIM_GUARD set) -- the rest of the gate still runs." >&2
|
|
106
|
+
elif [ -n "$branch" ]; then
|
|
95
107
|
sh scripts/biffo.sh claim --guard "$branch"
|
|
96
108
|
claim_status=$?
|
|
97
109
|
|
|
@@ -89,9 +89,21 @@ fi
|
|
|
89
89
|
# branches are fine, and noise kills a gate. Measured on a branch that DOES
|
|
90
90
|
# name one: the added latency is the cost of two `gh` lookups, similar in
|
|
91
91
|
# order of magnitude to `rewrite-scope-check` above.
|
|
92
|
+
#
|
|
93
|
+
# BIFFO_SKIP_CLAIM_GUARD -- narrow, claim-only escape hatch (#1327). Before
|
|
94
|
+
# this, the only documented way past a false positive here was
|
|
95
|
+
# BIFFO_SKIP_VERIFY at the top of this file, which does not target the claim
|
|
96
|
+
# guard: it skips the WHOLE gate -- ruff, pyright, bandit, gitleaks,
|
|
97
|
+
# rewrite-scope, this guard, everything. An agent reading "skip the claim
|
|
98
|
+
# guard" reasonably reaches for the only hatch documented and gets "skip
|
|
99
|
+
# everything" instead; one did, in the session #1327 was filed from. This
|
|
100
|
+
# variable bypasses exactly the `claim --guard` call below and nothing else --
|
|
101
|
+
# rewrite-scope-check, the pg-test block gate and `verify` all still run.
|
|
92
102
|
branch=$(git symbolic-ref --quiet --short HEAD) || branch=""
|
|
93
103
|
|
|
94
|
-
if [ -n "$
|
|
104
|
+
if [ -n "${BIFFO_SKIP_CLAIM_GUARD:-}" ]; then
|
|
105
|
+
echo "pre-push: claim guard skipped (BIFFO_SKIP_CLAIM_GUARD set) -- the rest of the gate still runs." >&2
|
|
106
|
+
elif [ -n "$branch" ]; then
|
|
95
107
|
sh scripts/biffo.sh claim --guard "$branch"
|
|
96
108
|
claim_status=$?
|
|
97
109
|
|