From f6dced2e3be5ee79bdb0909463d39e1efee205af Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Tue, 14 Jul 2026 20:13:07 +0000 Subject: [PATCH 1/3] fix: propagate security.legacySecurity and security.securityMode to spec CLI mapping MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Add missing Section 5 CLI mapping entries for two security fields introduced in PRs #6197 and #6209: - security.legacySecurity → --legacy-security - security.securityMode → --security-mode (deprecated) Both fields exist in src/awf-config-schema.json, src/types/security-options.ts, src/config-file.ts, and src/config-mapper.ts but were not listed in the docs/awf-config-spec.md Section 5 CLI Mapping table. Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> --- docs/awf-config-spec.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index 62836dbca..9e57189d8 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -161,6 +161,8 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - When both `apiProxy.targets.antigravity` and `apiProxy.targets.gemini` are set, `antigravity` takes precedence per field. - `apiProxy.targets.vertex.host` → `--vertex-api-target` - `apiProxy.targets.vertex.basePath` → `--vertex-api-base-path` +- `security.legacySecurity` → `--legacy-security` *(boolean; enables legacy/compat security mode; mutually exclusive with strict mode)* +- `security.securityMode` → `--security-mode` *([DEPRECATED] Use `legacySecurity` instead. Accepted values: `"strict"` (default) or `"compat"`. `"compat"` is equivalent to `--legacy-security`.)* - `security.sslBump` → `--ssl-bump` - `security.enableDlp` → `--enable-dlp` - `security.enableHostAccess` → `--enable-host-access` From 7e22265344eb5f569a8425b16f420c60ea3764f3 Mon Sep 17 00:00:00 2001 From: Landon Cox Date: Tue, 14 Jul 2026 17:46:01 -0700 Subject: [PATCH 2/3] Potential fix for pull request finding Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com> --- docs/awf-config-spec.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/awf-config-spec.md b/docs/awf-config-spec.md index 9e57189d8..c197738f0 100644 --- a/docs/awf-config-spec.md +++ b/docs/awf-config-spec.md @@ -161,7 +161,7 @@ AWF settings MAY be supplied via config files, including stdin (`--config -`). - When both `apiProxy.targets.antigravity` and `apiProxy.targets.gemini` are set, `antigravity` takes precedence per field. - `apiProxy.targets.vertex.host` → `--vertex-api-target` - `apiProxy.targets.vertex.basePath` → `--vertex-api-base-path` -- `security.legacySecurity` → `--legacy-security` *(boolean; enables legacy/compat security mode; mutually exclusive with strict mode)* +- `security.legacySecurity` → `--legacy-security` *(boolean; when true, enables legacy/compat security mode; when false or omitted, strict security is used)* - `security.securityMode` → `--security-mode` *([DEPRECATED] Use `legacySecurity` instead. Accepted values: `"strict"` (default) or `"compat"`. `"compat"` is equivalent to `--legacy-security`.)* - `security.sslBump` → `--ssl-bump` - `security.enableDlp` → `--enable-dlp` From 1bb4ae11aeab1f5487caec5f7b3854ba294dbf8c Mon Sep 17 00:00:00 2001 From: Landon Cox Date: Wed, 15 Jul 2026 08:38:57 -0700 Subject: [PATCH 3/3] chore: trigger CI checks