@biffo/cli 0.315.4 → 0.315.6
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -93,10 +93,13 @@ fi
|
|
|
93
93
|
# BIFFO_SKIP_CLAIM_GUARD -- narrow, claim-only escape hatch (#1327). Before
|
|
94
94
|
# this, the only documented way past a false positive here was
|
|
95
95
|
# BIFFO_SKIP_VERIFY at the top of this file, which does not target the claim
|
|
96
|
-
# guard: it skips the WHOLE gate -- ruff, pyright, bandit,
|
|
97
|
-
#
|
|
98
|
-
#
|
|
99
|
-
#
|
|
96
|
+
# guard: it skips the WHOLE gate -- ruff, pyright, bandit, rewrite-scope,
|
|
97
|
+
# this guard, everything. gitleaks is deliberately not named here: verify.sh
|
|
98
|
+
# only runs it when the binary is installed locally and reports "APPLICABLE
|
|
99
|
+
# BUT NOT RUN" otherwise, so it is not a member of the gate this variable
|
|
100
|
+
# reliably skips (#2038). An agent reading "skip the claim guard" reasonably
|
|
101
|
+
# reaches for the only hatch documented and gets "skip everything" instead;
|
|
102
|
+
# one did, in the session #1327 was filed from. This
|
|
100
103
|
# variable bypasses exactly the `claim --guard` call below and nothing else --
|
|
101
104
|
# rewrite-scope-check, the pg-test block gate and `verify` all still run.
|
|
102
105
|
branch=$(git symbolic-ref --quiet --short HEAD) || branch=""
|
|
@@ -93,10 +93,13 @@ fi
|
|
|
93
93
|
# BIFFO_SKIP_CLAIM_GUARD -- narrow, claim-only escape hatch (#1327). Before
|
|
94
94
|
# this, the only documented way past a false positive here was
|
|
95
95
|
# BIFFO_SKIP_VERIFY at the top of this file, which does not target the claim
|
|
96
|
-
# guard: it skips the WHOLE gate -- ruff, pyright, bandit,
|
|
97
|
-
#
|
|
98
|
-
#
|
|
99
|
-
#
|
|
96
|
+
# guard: it skips the WHOLE gate -- ruff, pyright, bandit, rewrite-scope,
|
|
97
|
+
# this guard, everything. gitleaks is deliberately not named here: verify.sh
|
|
98
|
+
# only runs it when the binary is installed locally and reports "APPLICABLE
|
|
99
|
+
# BUT NOT RUN" otherwise, so it is not a member of the gate this variable
|
|
100
|
+
# reliably skips (#2038). An agent reading "skip the claim guard" reasonably
|
|
101
|
+
# reaches for the only hatch documented and gets "skip everything" instead;
|
|
102
|
+
# one did, in the session #1327 was filed from. This
|
|
100
103
|
# variable bypasses exactly the `claim --guard` call below and nothing else --
|
|
101
104
|
# rewrite-scope-check, the pg-test block gate and `verify` all still run.
|
|
102
105
|
branch=$(git symbolic-ref --quiet --short HEAD) || branch=""
|