Org marketplace rules naming github.com now also match plugins cloned over GitHub's SSH alias host.
What's wrong with this entry?
An org policy hostPattern that names github.com now also matches marketplaces cloned over the GitHub SSH alias host.
strictKnownMarketplaceshostPattern matching now passes{ foldGitHubAliases: !0 }, so the URL host is tested against both ssh.github.com and github.com.- Only affects orgs that use policy-settings hostPattern rules.
- Invalid patterns still log "Invalid hostPattern regex in policy settings".
ssh.github.com
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.242
Blocked skills-directory plugins say which policy to change
Both mention strict known marketplace
-
v2.1.232
allowedMarketplacesworks as an alias forstrictKnownMarketplacesBoth mention strict known marketplace
- v2.1.10 Host Pattern Matching for Enterprise Marketplace Sources