Context
- Framework version: dev
- Project: project (shared-tooling mode)
- Reported: 2026-06-14T12:36:08Z
Description
When committing from a git worktree created via the framework, the pre-commit secret-scan prints 'secret-scan: scanner not found at /agents/git/lib/secret-scan.sh (skipping)' and skips scanning. The scanner lives in the main checkout; worktrees resolve the path relative to the worktree root, where agents/git/lib/ is absent. Impact: secret scanning is silently disabled for ALL worktree commits — a security-gate gap, since worktree-based work is the framework's recommended isolation workflow. Suggested fix: resolve the scanner via the framework root (bin/fw location / .framework.yaml) rather than CWD-relative.
Reported via fw upstream report from field installation
Context
Description
When committing from a git worktree created via the framework, the pre-commit secret-scan prints 'secret-scan: scanner not found at /agents/git/lib/secret-scan.sh (skipping)' and skips scanning. The scanner lives in the main checkout; worktrees resolve the path relative to the worktree root, where agents/git/lib/ is absent. Impact: secret scanning is silently disabled for ALL worktree commits — a security-gate gap, since worktree-based work is the framework's recommended isolation workflow. Suggested fix: resolve the scanner via the framework root (bin/fw location / .framework.yaml) rather than CWD-relative.
Reported via
fw upstream reportfrom field installation