Repository navigation
Add strict validation for untrusted raw step fragments #2068
Agent suggestions
Public previewDescription
Follow-up extracted from #1061. Raw authored steps can still reach Step::RawYaml; add a strict validation path for isolated untrusted fragments using the current typed task parsers and lint findings. Define accepted shapes, reject unsafe or ambiguous input, and add compile/lint contract tests.
Activity
github-actions commentedon Sep 1, 2026
🏷️ Triaged
Labeled as enhancement, rust, security.
Why: This is a feature request to add strict validation for untrusted raw step fragments (
Step::RawYaml) using the compiler's typed task parsers and lint findings — it touches Rust compiler internals and is security-motivated (validating untrusted input).Automated triage — a maintainer can adjust labels anytime.