Fix gvisor+privileged sandbox codemod gap and add missing tools.bash codemod for min-integrity: none - #53964

Merged

pelikhan merged 11 commits into

mainfrom

copilot/aw-compat-fix-codemod-gaps

Aug 19, 2026

Commits on Aug 19, 2026

Initial plan
Copilot
authored
93ecd95
Fix sandbox gvisor+privileged codemod and add min-integrity bash codemod

Copilot
and
pelikhan
authored
71bb2ed
Simplify insertBashFalseIntoTopLevelTools per code review

Copilot
and
pelikhan
authored
1d520ec
Keep runtime: gvisor and drop sudo/legacy-security instead of migrating runtime

Copilot
and
pelikhan
authored
9017c9d
docs(adr): add draft ADR-53964 for preferring restrictive safe defaults in ambiguous codemod cases

github-actions[bot]
and
claude
authored
3d456ae
Merge branch 'main' into copilot/aw-compat-fix-codemod-gaps
github-actions[bot]
authored
d414ca0
Run min-integrity bash codemod before cli-proxy codemod and support inline tools mappings

Copilot
and
gh-aw-bot
authored
39149f0
Add t.Parallel to single-pass codemod registry test

Copilot
and
gh-aw-bot
authored
9c47fb0
Merge branch 'main' into copilot/aw-compat-fix-codemod-gaps
github-actions[bot]
authored
b6addb5
Add regression tests for gvisor+sudo+legacy-security and comment-skipping bash insertion

Copilot
and
gh-aw-bot
authored
437dc51
Merge branch 'main' into copilot/aw-compat-fix-codemod-gaps
github-actions[bot]
authored
84cd22c