Honor bot allowlists before confused-deputy checks - #60135

Merged

pelikhan merged 23 commits into

mainfrom

copilot/fix-confused-deputy-check

Sep 11, 2026

Commits on Sep 11, 2026

Initial plan
Copilot
authored
5f20ef8
Allow trusted bots through synchronize guard

Copilot
and
pelikhan
authored
8cd31f6
Merge branch 'main' into copilot/fix-confused-deputy-check
github-actions[bot]
authored
76f4cc6
Preserve confused-deputy checks outside trusted syncs

Copilot
and
gh-aw-bot
authored
d68f0f3
Merge branch 'main' into copilot/fix-confused-deputy-check
github-actions[bot]
authored
a41dfda
Plan security review follow-up

Copilot
and
gh-aw-bot
authored
ed1f540
Restrict bot bypass to same-repository PRs

Copilot
and
gh-aw-bot
authored
ac93105
Merge branch 'main' into copilot/fix-confused-deputy-check
github-actions[bot]
authored
15845e2
Plan Actions security review

Copilot
and
pelikhan
authored
2c6f718
Require trusted PR authors for bot syncs

Copilot
and
pelikhan
authored
3373a29
Plan final PR follow-up

Copilot
and
gh-aw-bot
authored
b8d25ee
Merge remote-tracking branch 'origin/main' into copilot/fix-confused-deputy-check
Copilot
authored
1e88eed
Refresh branch and restore current action pin

Copilot
and
gh-aw-bot
authored
c30d400
Plan latest PR follow-up

Copilot
and
gh-aw-bot
authored
3cc37c3
Remove unrelated generated artifacts

Copilot
and
gh-aw-bot
authored
9a72d36
Plan review thread resolution

Copilot
and
gh-aw-bot
authored
973811a
Remove unrelated generated artifacts

Copilot
and
gh-aw-bot
authored
d365cf9
Plan obsolete review cleanup

Copilot
and
gh-aw-bot
authored
ac8ac79
Remove unrelated generated artifacts

Copilot
and
gh-aw-bot
authored
92d998a
Plan membership logging

Copilot
and
pelikhan
authored
7bf45d2
Log bot synchronization authorization decisions

Copilot
and
pelikhan
authored
f2a1e37
Plan threat specification update

Copilot
and
pelikhan
authored
1edcd85
Document bot synchronization threat control

Copilot
and
pelikhan
authored
be72029

Navigation Menu

Uh oh!

Honor bot allowlists before confused-deputy checks - #60135

Honor bot allowlists before confused-deputy checks#60135
pelikhan merged 23 commits into
mainfrom
copilot/fix-confused-deputy-check

Commits on Sep 11, 2026

Initial plan

Allow trusted bots through synchronize guard

Merge branch 'main' into copilot/fix-confused-deputy-check

Preserve confused-deputy checks outside trusted syncs

Merge branch 'main' into copilot/fix-confused-deputy-check

Plan security review follow-up

Restrict bot bypass to same-repository PRs

Merge branch 'main' into copilot/fix-confused-deputy-check

Plan Actions security review

Require trusted PR authors for bot syncs

Plan final PR follow-up

Merge remote-tracking branch 'origin/main' into copilot/fix-confused-deputy-check

Refresh branch and restore current action pin

Plan latest PR follow-up

Remove unrelated generated artifacts

Plan review thread resolution

Remove unrelated generated artifacts

Plan obsolete review cleanup

Remove unrelated generated artifacts

Plan membership logging

Log bot synchronization authorization decisions

Plan threat specification update

Document bot synchronization threat control