Skip to content

refactor(plugins): Add plugin egress policy helper - #1508

Merged
dcramer merged 3 commits into
mainfrom
refactor/github-tool-owned-write-policy
Aug 13, 2026
Merged

refactor(plugins): Add plugin egress policy helper#1508
dcramer merged 3 commits into
mainfrom
refactor/github-tool-owned-write-policy

Conversation

@sentry-junior

@sentry-junior sentry-junior Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

Closes #1504.

Adds enforceEgressPolicy to the plugin API so plugins can deny egress before credentials are issued. The helper is only allowed plus denialMessage.

The GitHub plugin uses it for issue and pull request body writes. GitHub routes, GraphQL fields, operations, and denial messages stay in the GitHub plugin. Write behavior does not change.

Requested by David Cramer.

--

View Junior Session [Sentry]

Co-Authored-By: David Cramer <david@sentry.io>
@vercel

vercel Bot commented Aug 13, 2026

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
junior-docs Ready Ready Preview Aug 13, 2026 2:05am

Request Review

Co-Authored-By: David Cramer <david@sentry.io>
@sentry-junior sentry-junior Bot changed the title refactor(github): Table-drive tool-owned writes refactor(plugins): Let plugins define egress policy Aug 13, 2026
Co-Authored-By: David Cramer <david@sentry.io>
@sentry-junior sentry-junior Bot changed the title refactor(plugins): Let plugins define egress policy refactor(plugins): Keep egress policy API thin Aug 13, 2026
@sentry-junior sentry-junior Bot changed the title refactor(plugins): Keep egress policy API thin refactor(plugins): Add plugin egress policy helper Aug 13, 2026
@dcramer
dcramer marked this pull request as ready for review August 13, 2026 02:30
@github-actions github-actions Bot added the risk: high PR risk score: high label Aug 13, 2026
@dcramer
dcramer merged commit e05910a into main Aug 13, 2026
39 checks passed
@dcramer
dcramer deleted the refactor/github-tool-owned-write-policy branch August 13, 2026 02:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

risk: high PR risk score: high

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Table-drive GitHub tool-owned write routing

1 participant