Jordan Ritter c445fa6ffe fix(ci): add build config file allowlist to block rogue configs ...

Pre-build lint step that fails if any build config file exists that
is not on the checked-in allowlist. Catches TanStack-style attacks
where a malicious vite_setup.mjs is auto-discovered during build.
Runs before pnpm install — zero npm dependencies.

2026-05-11 16:20:36 -07:00

..

check-config-allowlist.sh

fix(ci): add build config file allowlist to block rogue configs

2026-05-11 16:20:36 -07:00