didericis 427ef96e3f feat(pipelock): enforce DLP body-scan hits by default ...

Adds bottle.egress.dlp_action ("block" | "warn", default block) and
wires it into pipelock as request_body_scanning.action. Pipelock's
own default is "warn", which previously meant claude-bottle detected
credential patterns in outbound bodies but forwarded the request
anyway.

The matching integration test posts a manifest env var shaped like
a GitHub PAT to api.anthropic.com via plain HTTP forward proxy so
pipelock can see the body. Pipelock answers 403 from its body-scan
layer instead of forwarding to the upstream.

Behavior change: bottles without an explicit egress.dlp_action now
block on body-scan hits. Set egress.dlp_action: "warn" to restore
the prior detect-only behavior.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>

2026-05-12 11:39:25 -04:00

..

__init__.py

test: reorganize suite into unit/integration/canaries directories

2026-05-11 16:23:02 -04:00

test_dry_run_plan.py

test(dry-run): pin DOCKER_HOST so HOME override works on Desktop

2026-05-12 10:40:41 -04:00

test_orphan_cleanup.py

style: pass explicit check= to every subprocess.run call

2026-05-12 10:13:56 -04:00

test_pipelock_allow_node.py

feat(bottle): add exec method to the bottle abstraction

2026-05-12 11:18:43 -04:00

test_pipelock_block_node.py

feat(bottle): add exec method to the bottle abstraction

2026-05-12 11:18:43 -04:00

test_pipelock_blocks_secret_post.py

feat(pipelock): enforce DLP body-scan hits by default

2026-05-12 11:39:25 -04:00

test_pipelock_sidecar_smoke.py

style: pass explicit check= to every subprocess.run call

2026-05-12 10:13:56 -04:00