Package and harden the Actions execution environment #2

New issue

Closed

opened 2026-07-20 15:53:54 +01:00 by nimmo · 0 comments

nimmo commented

2026-07-20 15:53:54 +01:00

Owner

Make the reviewer reusable and safer to run outside the current Nova host setup.

Scope:

Provide container packaging and versioned action release guidance.
Document/minimize token permissions and fork behavior.
Add command resource limits, safer execution isolation, and redacted observability.
Define advisory status-check behavior and failure handling.

Acceptance:

A repository can consume a versioned release/container.
Model input, runner commands, and logs follow the issue security requirements.

Make the reviewer reusable and safer to run outside the current Nova host setup. Scope: - Provide container packaging and versioned action release guidance. - Document/minimize token permissions and fork behavior. - Add command resource limits, safer execution isolation, and redacted observability. - Define advisory status-check behavior and failure handling. Acceptance: - A repository can consume a versioned release/container. - Model input, runner commands, and logs follow the issue security requirements.

nimmo added this to the Forgejo AI PR Review v1 milestone

2026-07-20 15:53:54 +01:00

nimmo referenced this issue from a pull request that will close it,

2026-07-21 21:15:46 +01:00

feat: package and harden reviewer execution #20

nimmo closed this issue

2026-07-21 22:33:02 +01:00