hermes - 💡(How to fix) Fix Profile HOME isolation can hide existing GitHub CLI auth from subprocesses [2 pull requests]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…

Fix Action

Fixed

RAW_BUFFERClick to expand / collapse

Bug

When Hermes profile HOME isolation is active, subprocesses can lose access to an existing host-level GitHub CLI auth config.

That makes commands such as gh auth status, git push, or gh pr create appear unauthenticated inside a profiled Hermes subprocess even when the OS account is already authenticated.

Reproduction

  1. Authenticate GitHub CLI on the OS account.
  2. Run a Hermes profile that rewrites HOME for subprocess isolation.
  3. Run gh auth status or a GitHub operation inside that profiled subprocess.
  4. gh does not see the existing account-level config if the profiled HOME has no gh config.

Expected

Profile isolation should remain intact, but foreground/background terminal subprocesses should preserve usable GitHub CLI auth when the OS account already has it.

Proposed fix

If a profiled subprocess HOME has no gh config but the OS account does, set GH_CONFIG_DIR to the account-level gh config directory for both foreground and background terminal environments.

Relevant files from the closed PR draft:

  • tools/environments/local.py
  • tests/test_subprocess_home_isolation.py

Related: #29015 covers a similar profile-HOME isolation class of issue for macOS CLI auth.

Originally proposed as PR #29503, now converted to an issue to avoid maintaining a contributor fork.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING