Skip to content
Permalink

Comparing changes

Choose two branches to see what’s changed or to start a new pull request. If you need to, you can also or learn more about diff comparisons.

Open a pull request

Create a new pull request by comparing changes across two branches. If you need to, you can also . Learn more about diff comparisons here.
base repository: github/github-mcp-server
Failed to load repositories. Confirm that selected base ref is valid, then try again.
Loading
base: main
Choose a base ref
...
head repository: github/github-mcp-server
Failed to load repositories. Confirm that selected head ref is valid, then try again.
Loading
compare: sammorrowdrums-harden-lockdown-pr-commits
Choose a head ref
Checking mergeability… Don’t worry, you can still create the pull request.
  • 2 commits
  • 4 files changed
  • 2 contributors

Commits on Aug 19, 2026

  1. fix(lockdown): harden pull_request_read get_commits handling 

    pull_request_read's get_commits method previously returned commit
messages without any lockdown check, unlike get_diff and get_files
which restrict the whole result when the PR author lacks push access.
Commit content is part of the same untrusted head branch as the diff
and file list, so GetPullRequestCommits now reuses
enforcePullRequestLockdown for consistent, fail-closed behavior
without adding a per-commit permission lookup.

Also updates the lockdown documentation in README.md and
docs/server-configuration.md to:
- list pull_request_read:get_diff, get_files, and get_commits among
  the tools that error when the PR author lacks push access (get_diff
  and get_files were already implemented this way but undocumented)
- clarify that lockdown mode is a best-effort content filter to
  reduce prompt-injection risk, not an authorization boundary
- document the existing intentional trusted-bot exception
  (github-actions[bot], copilot) accurately

Fixes #3105

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
    @SamMorrowDrums
    SamMorrowDrums and Copilot committed Aug 19, 2026
    Configuration menu
    Copy the full SHA
    cd1642a View commit details
    Browse the repository at this point in the history

  2. refactor: condense lockdown comments in pull_request_read get_commits 

    Trim the GetPullRequestCommits doc comment to a single terse sentence
and remove a test comment that only restated the test name.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
    @SamMorrowDrums
    SamMorrowDrums and Copilot committed Aug 19, 2026
    Configuration menu
    Copy the full SHA
    5ef7a40 View commit details
    Browse the repository at this point in the history
Loading