chore: allow frozen bun installs - #109
Merged
Merged
Conversation
Add an explicit allow rule for bun install --frozen-lockfile so dependency installation can run without prompting while preserving the lockfile.\n\nVerified with codex execpolicy check and make deploy-dry-run.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
bun の frozen lockfile install を許可
Summary
bun install --frozen-lockfileを Codex の allow rules に明示し、ロックファイルを変更しない依存関係インストールを prompt なしで実行できるようにします。主な変更点:
bun install --frozen-lockfile専用の allow rule を追加やったこと
codex/rules/allow.rulesに prefix rule を追加allowと判定されることを確認動作確認
git diff --checkcodex execpolicy check --pretty --rules codex/rules/allow.rules bun install --frozen-lockfileGOMODCACHE=/tmp/gomodcache GOCACHE=/tmp/gocache GOTOOLCHAIN=local make deploy-dry-runレビュー & 動作確認 チェックリスト
bun install --frozen-lockfileに専用 allow rule が一致することcodex/rules/allow.rules以外に意図しない差分がないこと推奨テスト計画:
codex execpolicy checkで対象コマンドを評価するallowで専用ルールにも一致することを確認するmake deploy-dry-runが成功することを確認するその他気になることや相談ごと
なし