fix: enforce review check tool policy (#11128)

This commit is contained in:
Jasper
2026-08-11 07:28:12 -06:00
committed by GitHub
parent 7a573173e7
commit 38debd7420
3 changed files with 56 additions and 2 deletions
@@ -479,7 +479,7 @@ Review the current git diff using goose. By default, `goose review` reviews the
- **`--turn-limit <N>`**: Set the default turn limit for orchestrated review subprocesses and checks
- **`--dry-run`**: Print the assembled review prompt and discovered checks without running the review
- **`-q, --quiet`**: Suppress non-result output from the underlying agent
- **`--no-orchestrate`**: Disable the default Rust-driven parallel orchestrator and use the single-prompt path
- **`--no-orchestrate`**: Disable the default Rust-driven parallel orchestrator and use the single-prompt path. Checks that declare `tools` are rejected because this path cannot enforce per-check tool allowlists.
- **`-i, --instructions <TEXT>`**: Add free-form review instructions
- **`-f, --files <FILE>...`**: Restrict the review to specific files
- **`-c, --check-filter <NAME>...`**: Run only checks with matching names