Agent sessions use HTTPS for github.com, sidestepping sandbox SSH block - #25
Merged
Conversation
…box SSH block The Claude Code sandbox denies outbound port 22 at the TCP connect level, so every agent git push/fetch/pull/clone over SSH fails and needs dangerouslyDisableSandbox as a workaround. HTTPS to github.com already works sandboxed. Rewrite git@github.com: to https://github.com/ and wire up gh's credential helper in both role-scoped agent gitconfig fragments (ADR 0031). Only affects agent sessions; interactive shells keep using SSH. Verified sandboxed: push + fetch succeed via a scratch branch on technicalpickles/dotfiles (cleaned up after), and commit signing is unaffected (still a Good signature for josh.nichols+agent@gusto.com). See pickletown bean gt-o2jy for the underlying investigation.
1 task
technicalpickles
added a commit
that referenced
this pull request
Aug 26, 2026
Follow-up to dotfiles-187t/#25 (agent-only HTTPS transport). Tracks the open question of whether to also default human-interactive git to HTTPS, and what -- if any -- work/Gusto-side reasons exist to keep SSH before making that call.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
dangerouslyDisableSandboxevery timeurl.insteadOf(rewritegit@github.com:tohttps://github.com/) and agh-backed credential helper to bothclaude-agent-workandclaude-agent-home(ADR 0031's role-scoped fragments), so agent sessions transparently use HTTPS insteadGIT_CONFIG_GLOBALmechanism -- interactive shells are untouched and keep using SSHTest plan
git ls-remotevia the new config, sandboxed (no override) -- resolved over HTTPSgit push/delete of a scratch branch againsttechnicalpickles/dotfilesvia the new config, sandboxed -- succeeded, cleaned upGoodsignature for the agent identity (signing is local, unaffected by transport)Related: pickletown bean gt-o2jy (the underlying investigation) and dotfiles-187t.