#allowlist
Tagged “allowlist”
2 articlesSupply chain security
The command your agent approved is not the command that ran
A Docker write-up walks through CVE-2026-22708, a Cursor flaw where shell built-ins slipped past the agent's allowlist and quietly rewrote the environment, turning an approved git branch into arbitrary code execution. Docker's answer is to sandbox the whole agent, which shrinks the blast radius without closing every hole.
Aug 18, 2026 · Tomás VegaSecurity & supply chainGitHub Actions hands platform teams a workflow-trigger allow list
GitHub Actions is rolling out workflow execution protections in public preview at the enterprise, organization, and repository levels, letting administrators define who and what can trigger workflows. It's the platform-owned trigger gate the CI/CD industry has been quietly working toward for years.
Jun 18, 2026 · Tomás Vega