Skip to content

fix: expand destructive-command blocklist to prevent security bypasses #7379

fix: expand destructive-command blocklist to prevent security bypasses

fix: expand destructive-command blocklist to prevent security bypasses #7379

Triggered via pull request July 22, 2026 05:00
Status Failure
Total duration 10m 15s
Artifacts 2

pr-checks.yaml

on: pull_request
get-packages-matrix
9s
get-packages-matrix
vscode-get-test-file-matrix
2m 5s
vscode-get-test-file-matrix
vscode-package-extension-linux
5m 2s
vscode-package-extension-linux
track-rerun
track-rerun
Matrix: packages-checks
Matrix: vscode-e2e-tests
require-all-checks-to-pass
5s
require-all-checks-to-pass
Fit to window
Zoom out
Zoom in

Annotations

16 errors and 54 warnings
prettier-check
Process completed with exit code 1.
packages-checks (terminal-security)
Process completed with exit code 1.
test/terminalCommandSecurity.test.ts > evaluateTerminalCommandSecurity > Logging and Monitoring Evasion > should require permission for shred command: packages/terminal-security/test/terminalCommandSecurity.test.ts#L1579
AssertionError: expected 'disabled' to be 'allowedWithPermission' // Object.is equality Expected: "allowedWithPermission" Received: "disabled" ❯ test/terminalCommandSecurity.test.ts:1579:22
test/terminalCommandSecurity.test.ts > evaluateTerminalCommandSecurity > Low Risk - Safe Commands > should require permission for find with -delete: packages/terminal-security/test/terminalCommandSecurity.test.ts#L801
AssertionError: expected 'disabled' to be 'allowedWithPermission' // Object.is equality Expected: "allowedWithPermission" Received: "disabled" ❯ test/terminalCommandSecurity.test.ts:801:22
packages-checks (openai-adapters)
The strategy configuration was canceled because "packages-checks.terminal-security" failed
packages-checks (openai-adapters)
The operation was canceled.
packages-checks (config-types)
The strategy configuration was canceled because "packages-checks.terminal-security" failed
packages-checks (config-types)
The operation was canceled.
packages-checks (continue-sdk)
The strategy configuration was canceled because "packages-checks.terminal-security" failed
packages-checks (continue-sdk)
The operation was canceled.
packages-checks (fetch)
The strategy configuration was canceled because "packages-checks.terminal-security" failed
packages-checks (fetch)
The operation was canceled.
packages-checks (config-yaml)
The strategy configuration was canceled because "packages-checks.terminal-security" failed
packages-checks (config-yaml)
The operation was canceled.
jetbrains-tests
Process completed with exit code 1.
require-all-checks-to-pass
Process completed with exit code 1.
packages-checks (llm-info)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (terminal-security)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (openai-adapters)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (config-types)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (continue-sdk)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (fetch)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
packages-checks (config-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
binary-checks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
vscode-checks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
vscode-checks: extensions/vscode/src/activation/JumpManager.ts#L381
Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator
vscode-checks: extensions/vscode/src/activation/JumpManager.ts#L369
Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator
vscode-checks: extensions/vscode/src/activation/JumpManager.ts#L122
Expected { after 'if' condition
vscode-checks: extensions/vscode/src/activation/JumpManager.ts#L6
There should be at least one empty line between import groups
vscode-checks: extensions/vscode/src/activation/JumpManager.ts#L5
There should be at least one empty line between import groups
vscode-checks: extensions/vscode/src/VsCodeIde.ts#L325
Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator
vscode-checks: extensions/vscode/src/VsCodeIde.ts#L157
Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator
vscode-checks: extensions/vscode/src/VsCodeIde.ts#L6
`core/indexing/ignore` import should occur before import of `core/util/constants`
vscode-checks: extensions/vscode/src/ContinueGUIWebviewViewProvider.ts#L54
Promises must be awaited, end with a call to .catch, end with a call to .then with a rejection handler or be explicitly marked as ignored with the `void` operator
vscode-checks: extensions/vscode/src/ContinueConsoleWebviewViewProvider.ts#L3
`core/llm/logger` import should occur before import of `core/util/constants`
gui-checks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
core-checks
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
core-checks: core/config/validation.ts#L106
Unexpected negated condition
core-checks: core/config/validation.ts#L81
Unexpected negated condition
core-checks: core/config/validation.ts#L14
Unexpected negated condition
core-checks: core/config/migrateSharedConfig.ts#L80
Unexpected negated condition
core-checks: core/config/load.ts#L530
Unexpected negated condition
core-checks: core/config/load.ts#L445
Unexpected negated condition
core-checks: core/autocomplete/filtering/BracketMatchingService.ts#L97
Unexpected negated condition
core-checks: core/autocomplete/context/ImportDefinitionsService.ts#L58
Unexpected negated condition
vscode-package-extension-linux
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-node@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/GUI.test.js (e2e:ci:run-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/GUI.test.js (e2e:ci:run-yaml)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/GUI.test.js (e2e:ci:run)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/GUI.test.js (e2e:ci:run)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/PromptFile.test.js (e2e:ci:run)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/PromptFile.test.js (e2e:ci:run)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/Edit.test.js (e2e:ci:run-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/Edit.test.js (e2e:ci:run-yaml)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/Autocomplete.test.js (e2e:ci:run)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/Autocomplete.test.js (e2e:ci:run)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/Edit.test.js (e2e:ci:run)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/Edit.test.js (e2e:ci:run)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/PromptFile.test.js (e2e:ci:run-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/PromptFile.test.js (e2e:ci:run-yaml)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/KeyboardShortcuts.test.js (e2e:ci:run-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/KeyboardShortcuts.test.js (e2e:ci:run-yaml)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/Autocomplete.test.js (e2e:ci:run-yaml)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/Autocomplete.test.js (e2e:ci:run-yaml)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
e2e/_output/tests/KeyboardShortcuts.test.js (e2e:ci:run)
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/download-artifact@v4, actions/setup-node@v4, actions/upload-artifact@v4. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
e2e/_output/tests/KeyboardShortcuts.test.js (e2e:ci:run)
No files were found with the provided path: extensions/vscode/e2e.log. No artifacts will be uploaded.
jetbrains-tests
Node.js 20 is deprecated. The following actions target Node.js 20 but are being forced to run on Node.js 24: actions/cache@v4, actions/setup-java@v4.5.0, actions/setup-node@v4, actions/upload-artifact@v4, gradle/actions/setup-gradle@v3. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
jetbrains-tests
Failed to restore gradle-home-v1|Linux|jetbrains-tests[9f089130751f85de2fa573118b092c5f]-1fb9d2a75fe194f6cf46a5f9b75cf1b85fb33a5e: Error: Cache service responded with 400

Artifacts

Produced during runtime
Name Size Digest
jb-failure-report
870 KB
sha256:6c106eebc7e26876edc850260a2f2e8d5aa00d122cf511c01da98c65d3b22d67
vscode-extension-build-Linux
75.7 MB
sha256:81e50abf7f53417649caf04128f9fe92ec827a14ab8f02ecdd53b388af35ef9e