Skip to content

fix(sandbox): protect daemon token file #5000

fix(sandbox): protect daemon token file

fix(sandbox): protect daemon token file #5000

Triggered via pull request October 16, 2026 08:53
Status Success
Total duration 4m 5s
Artifacts 2

ci.yml

on: pull_request
Code Quality & Lint
1m 34s
Code Quality & Lint
Unit Tests & Coverage
2m 11s
Unit Tests & Coverage
Race Detector
3m 2s
Race Detector
Performance Smoke
53s
Performance Smoke
Security & Code Health
15s
Security & Code Health
Matrix: smoke
Fit to window
Zoom out
Zoom in

Annotations

16 errors, 8 warnings, and 7 notices
Code Quality & Lint
Process completed with exit code 2.
Code Quality & Lint: internal/tools/workspace.go#L224
type rootedScopedPath is unused (unused)
Code Quality & Lint: internal/tools/web_fetch.go#L315
QF1008: could remove embedded field "Transport" from selector (staticcheck)
Code Quality & Lint: internal/proxydial/proxydial.go#L72
QF1008: could remove embedded field "Transport" from selector (staticcheck)
Code Quality & Lint: internal/proxydial/proxydial.go#L67
QF1008: could remove embedded field "Transport" from selector (staticcheck)
Code Quality & Lint: internal/installtest/workflow_permissions_test.go#L20
QF1001: could apply De Morgan's law (staticcheck)
Code Quality & Lint: internal/pathjail/pathjail.go#L101
unreachable func: RefuseReparse
Code Quality & Lint: internal/pathjail/pathjail.go#L52
unreachable func: Open
Code Quality & Lint: internal/mcp/client.go#L111
unreachable func: Connect
Code Quality & Lint: internal/daemon/remote/auth.go#L141
unreachable func: CanonicalizeTokenFileEnv
Code Quality & Lint: internal/daemon/remote/auth.go#L76
unreachable func: TokenFromEnv
Code Quality & Lint: internal/cron/store.go#L401
unreachable func: Store.Runs
Code Quality & Lint: internal/agenteval/trace.go#L32
unreachable func: MissingTraceEvents
Code Quality & Lint: internal/agent/prompt_fingerprint.go#L202
unreachable func: ComputePrefixFingerprint
Code Quality & Lint: internal/agent/prompt_fingerprint.go#L31
unreachable func: buildPromptSubstrings
Code Quality & Lint: internal/agent/compaction.go#L724
unreachable func: summarizeWithFallback
Security & Code Health
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Performance Smoke
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Code Quality & Lint
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Unit Tests & Coverage
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff, actions/upload-artifact@ea165f8d65b6e75b540449e92b4886f43607fa02. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (ubuntu-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Race Detector
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (macos-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Smoke (windows-latest)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5, actions/setup-go@40f1582b2485089dde7abd97c1529aa768e1baff. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Security & Code Health
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Performance Smoke
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Code Quality & Lint
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Unit Tests & Coverage
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Smoke (ubuntu-latest)
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Race Detector
"The ubuntu-latest label will migrate to Ubuntu 26 beginning October 19, 2026. For more information, see https://github.com/actions/runner-images/issues/14748"
Smoke (macos-latest)
Due to capacity constraints, jobs targeting macOS arm64 runners may experience longer queue times.

Artifacts

Produced during runtime
Name Size Digest
zero-coverage-report
483 KB
sha256:7b257dae132bbe54982981a0a2f1c41ef48e61f06ecfdd08671377fe9b9e5e72
zero-performance-smoke
674 Bytes
sha256:c8f5cacde409efb22e21b56f43bda01cf3acfe8326ac6c5636d668ba497a9a97