mirrors/hermes-agent
1
0
Fork 0
mirror of https://github.com/NousResearch/hermes-agent.git synced 2026-05-22 05:22:09 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 10

fix(cron): allow quoted URL in github auth-header allowlist

Browse source 
The github-pr-workflow skill wraps the URL in double-quotes
('curl -H ... "https://api.github.com/..."'), which the original
allowlist regex (\s+https://api...) did not match. Without this,
the bundled github-pr-workflow skill is still blocked at every
cron tick despite #22605's fix landing for the bare-URL form.

Make the leading quote optional and add a regression test pinning
both single- and double-quoted forms.
This commit is contained in:
Teknium 2026-05-09 09:06:20 -07:00
parent 691778a08b
commit b6ff96c057
2 changed files with 12 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
tools/cronjob_tools.py
View file

@ -73,7 +73,7 @@ def _scan_cron_prompt(prompt: str) -> str:
"""Scan a cron prompt for critical threats. Returns error string if blocked, else empty."""
github_auth_header = re.search(
rf'curl\s+[^\n]*(?:-H|--header)\s+["\']Authorization:\s*token\s+{_CRON_SECRET_VAR_RE}["\']'
r'\s+https://api\.github\.com(?:/|\b)',
r'\s+["\']?https://api\.github\.com(?:/|\b)',
prompt,
re.IGNORECASE,
)