Skip to content

Avoid trust project prompts from PsySH#198

Merged
taylorotwell merged 2 commits into
2.xfrom
trust-project
Feb 6, 2026
Merged

Avoid trust project prompts from PsySH#198
taylorotwell merged 2 commits into
2.xfrom
trust-project

Conversation

@WendellAdriel

Copy link
Copy Markdown
Member

This prevents this prompt when running php artisan tinker
image

This was put behind a config to control the behavior if needed.

@taylorotwell taylorotwell merged commit c9f80cc into 2.x Feb 6, 2026
54 of 55 checks passed
@cosmastech

Copy link
Copy Markdown

Thanks for adding this! 🙇

@bobthecow

bobthecow commented Feb 11, 2026

Copy link
Copy Markdown
Contributor

I don't have any strong opinions about people explicitly choosing to disable this (and I totally get it), but it's probably better to have the default state be safe-but-annoying, rather than dangerous without warning.

GHSA-4486-gxhx-5mg7

@davidlevyals davidlevyals left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

since it can be switched using env variable why not ask the devops?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

6 participants