build: restricted bash to durther prevent force merges or sudo escalation

2026-05-07 23:17:32 -04:00
parent f84150ea8d
commit 0ce32a88fc
40 changed files with 112 additions and 11 deletions
@@ -116,7 +116,8 @@ permission:
    "curl*localhost:4096*": deny
    "curl*127.0.0.1:4096*": deny

-    "sudo *": deny
+    "*force_merge*": deny
+    "*sudo*": deny

  task:
    "*": deny