{"version":"2.1.323","anchor":"governed-git-trust-bundle-reports-unjudged-certificates","canonical_anchor":"governed-git-trust-bundle-reports-unjudged-certificates","heading":"Self-hosted runners now report certificates kept without a block-list check","tier":"internal","area":"Self-Hosted Runners","scope":"org","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323\/e\/governed-git-trust-bundle-reports-unjudged-certificates","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.323","markdown":"### Self-hosted runners now report certificates kept without a block-list check\n\nThe certificate bundle for governed git on self-hosted runners now logs and reports certificates kept without being checked against the block list\n\n**What**\n\nA runner is a machine that runs Claude Code jobs; a self-hosted runner is one you operate yourself. When Claude Code builds the bundle of trusted security certificates for governed git access on a runner, it now logs when some certificates were kept without being checked against the block list of keys. It also reports these unchecked certificates in its result.\n\n**Why**\n\nIf you operate self-hosted runners, you can now see when certificates were trusted without that check.\n\n- Area: Self-Hosted Runners\n- Tier: Under the hood\n- Useful: 1\/5\n- Signal: 2\/5\n- Scope: org\n- Heads-up: no"}