Skip to content

Navigation Menu

Appearance settings

View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

QwenLM
qwen-code

Repository navigation

Code
Issues (1.4k)
Pull requests (332)
Discussions
Actions
Projects
Security and quality
Insights

fix(permissions): prevent MCP permission identity collisions #10202

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed

SLP-DEV1 wants to merge 42 commits into QwenLM:main from SLP-DEV1:fix/10199-mcp-permission-collisions

Conversation 71 Commits 42 Checks 43 Files changed

Uh oh!

There was an error while loading. Please reload this page.

Closed

fix(permissions): prevent MCP permission identity collisions #10202

Changes from 1 commit

Commits

Show all changes

Select commit Hold shift + click to select a range

fix(permissions): prevent MCP permission identity collisions

SLP-DEV1 Aug 26, 2026

chore: stage PR 10202 review fixes

SLP-DEV1 Aug 26, 2026

chore: trigger PR 10202 review fix workflow

SLP-DEV1 Aug 26, 2026

chore: add build step to PR 10202 fix verification

SLP-DEV1 Aug 26, 2026

chore: run PR 10202 build-and-test fix workflow

SLP-DEV1 Aug 26, 2026

chore: use focused PR verification path

SLP-DEV1 Aug 26, 2026

ci: finalize PR 10202 review fixes

SLP-DEV1 Aug 26, 2026

fix(permissions): match MCP rules against raw identity

github-actions[bot] Aug 26, 2026

chore: remove temporary PR 10202 fix workflow

SLP-DEV1 Aug 26, 2026

ci: clean up temporary PR 10202 workflow

SLP-DEV1 Aug 26, 2026

chore: remove temporary PR 10202 workflow

github-actions[bot] Aug 26, 2026

ci: include cleanup trigger removal

SLP-DEV1 Aug 26, 2026

ci: trigger PR 10202 cleanup

SLP-DEV1 Aug 26, 2026

chore: remove temporary PR 10202 workflow

github-actions[bot] Aug 26, 2026

ci: clean remaining PR 10202 helpers

SLP-DEV1 Aug 26, 2026

ci: trigger final PR 10202 cleanup

SLP-DEV1 Aug 26, 2026

chore: remove temporary PR 10202 helpers

github-actions[bot] Aug 26, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Aug 27, 2026

fix(permissions): preserve restrictive MCP alias matching

SLP-DEV1 Aug 27, 2026

test(permissions): cover restrictive MCP alias collisions

SLP-DEV1 Aug 27, 2026

ci: add focused PR 10202 validation

SLP-DEV1 Aug 27, 2026

ci: trigger focused PR 10202 validation

SLP-DEV1 Aug 27, 2026

ci: add focused subagent MCP blocklist fix

SLP-DEV1 Aug 27, 2026

ci: retrigger PR 10202 focused validation

SLP-DEV1 Aug 27, 2026

fix(agents): preserve raw MCP identity in disallowedTools

github-actions[bot] Aug 27, 2026

chore(ci): remove temporary PR 10202 validation helpers

SLP-DEV1 Aug 27, 2026

ci: finalize PR 10202 regression validation

SLP-DEV1 Aug 27, 2026

test(permissions): pin fail-closed MCP alias fallback

github-actions[bot] Aug 27, 2026

chore(ci): remove PR 10202 finalizer

SLP-DEV1 Aug 27, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Aug 27, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Aug 28, 2026

fix(permissions): resolve MCP restrictive matching regressions

SLP-DEV1 Aug 29, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Aug 29, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Aug 31, 2026

refactor(permissions): centralize restrictive rule evaluation

SLP-DEV1 Aug 31, 2026

refactor(permissions): reuse restrictive evaluation helper

SLP-DEV1 Aug 31, 2026

test(permissions): cover unique MCP alias grant wiring

SLP-DEV1 Aug 31, 2026

test(tools): cover live MCP alias ownership filtering

SLP-DEV1 Aug 31, 2026

test(permissions): pin fail-closed MCP matching without raw identity

SLP-DEV1 Aug 31, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Sep 1, 2026

Merge branch 'main' into fix/10199-mcp-permission-collisions

SLP-DEV1 Sep 1, 2026

ci: retrigger flaky test job

SLP-DEV1 Sep 2, 2026

File filter

Filter by extension

Filter by extension .yml (1) All 1 file type selected

Only manifest files

Deleted files Viewed files

Conversations

Failed to load comments.

Loading

Uh oh!

There was an error while loading. Please reload this page.

Jump to

Jump to file

Failed to load files.

Loading

Uh oh!

There was an error while loading. Please reload this page.

Diff view

Unified

Split

Hide whitespace

Diff view

Unified

Split

Hide whitespace

Previous commit

Next commit

chore: remove temporary PR 10202 fix workflow

Loading branch information

Uh oh!

There was an error while loading. Please reload this page.

SLP-DEV1 committed Aug 26, 2026

commit fe39586e3a5a1152bce21ce441be6e598b338ff0

There are no files selected for viewing

134 changes: 0 additions & 134 deletions 134 .github/workflows/pr-10202-fix.yml

Show comments

View file

Open in desktop

This file was deleted.

Oops, something went wrong.

Uh oh!

There was an error while loading. Please reload this page.

Add this suggestion to a batch that can be applied as a single commit. This suggestion is invalid because no changes were made to the code. Suggestions cannot be applied while the pull request is closed. Suggestions cannot be applied while viewing a subset of changes. Only one suggestion per line can be applied in a batch. Add this suggestion to a batch that can be applied as a single commit. Applying suggestions on deleted lines is not supported. You must change the existing code in this line in order to create a valid suggestion. Outdated suggestions cannot be applied. This suggestion has been applied or marked resolved. Suggestions cannot be applied from pending reviews. Suggestions cannot be applied on multi-line comments. Suggestions cannot be applied while the pull request is queued to merge. Suggestion cannot be applied right now. Please check back later.

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.