harness-openshell/tasks/github-pr-reviewer/openshell/policy.yaml at main · stackrox/harness-openshell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
version: 1
filesystem_policy:
  include_workdir: true
  read_only:
    - /usr
    - /lib
    - /lib64
    - /bin
    - /proc # OpenCode/Codex runtime startup
    - /etc
    - /dev/urandom
  read_write:
    - /sandbox
    - /tmp
    - /dev/null
landlock:
  compatibility: best_effort
process:
  run_as_user: sandbox
  run_as_group: sandbox
# Provider profiles grant only the native model and GitHub endpoints attached to
# this sandbox. No unrelated telemetry, package-registry, or other outbound
# destinations are granted to this worker.
network_policies:
  github_api:
    name: github-api
    endpoints:
      - host: api.github.com
        port: 443
        protocol: rest
        enforcement: enforce
        credential_binding:
          provider: ${REVIEW_GITHUB_PROVIDER}
        rules:
          - allow:
              method: GET
              path: /repos/${REVIEW_REPOSITORY}/pulls/${REVIEW_PR}
          - allow:
              method: GET
              path: /repos/${REVIEW_REPOSITORY}/issues/${REVIEW_PR}/comments
          - allow:
              method: GET
              path: /repos/${REVIEW_REPOSITORY}/pulls/${REVIEW_PR}/comments
          - allow:
              method: GET
              path: /repos/${REVIEW_REPOSITORY}/pulls/${REVIEW_PR}/reviews
          - allow:
              method: GET
              path: /repos/${REVIEW_REPOSITORY}/pulls/${REVIEW_PR}/files
          - allow:
              method: POST
              path: /repos/${REVIEW_REPOSITORY}/pulls/${REVIEW_PR}/comments
    binaries:
      - { path: /usr/bin/gh }
      - { path: /usr/bin/curl }
      - { path: /usr/bin/opencode }
      - { path: /usr/bin/codex }