{"name":"--confine-repo-settings","slug":"confine-repo-settings","family":"cli","title":"CLI flags","noun":"CLI flag","description":"The runner can warn about or block repo-committed settings that grant access outside the workspace.","description_source":"entry","described_by":{"version":"2.1.224","anchor":"runner-can-refuse-repo-committed-settings-that-reach-outside"},"presence":{"first_seen":null,"removed_in":null,"in_current_build":false,"newest_mined":"2.1.308","builds":0,"mined_builds":149,"first_cited":null},"aliases":[],"entries":[{"version":"2.1.295","anchor":"self-hosted-runner-remove-session-state-and-confine-rep","heading":"Runner help warns about leftover session state and shows warn as default","line":"Self-hosted runner help now says session state stays on disk when cleanup is off, and marks warn as the default confinement mode","released_at":"2026-10-08 18:22:58","reason":"found in this entry's text"},{"version":"2.1.224","anchor":"runner-can-refuse-repo-committed-settings-that-reach-outside","heading":"Runner can refuse repo-committed settings that reach outside the workspace","line":"The runner can warn about or block repo-committed settings that grant access outside the workspace.","released_at":"2026-08-07 01:36:32","reason":"named in this entry, found in this entry's text"}],"entries_total":2,"docs":[{"source":"claude-code","path":"self-hosted-environments-configuration","title":"Customize sessions in self-hosted environments","documented":false},{"source":"claude-code","path":"self-hosted-environments-deploy","title":"Deploy self-hosted environments to production","documented":false},{"source":"claude-code","path":"self-hosted-environments-reference","title":"Self-hosted environments reference","documented":false}],"docs_total":3,"gates":[],"related":[],"url":"https:\/\/changelogs.core-directive.com\/reference\/cli\/confine-repo-settings","family_url":"https:\/\/changelogs.core-directive.com\/reference\/cli.json"}