{"record":{"id":"2748db56ce35db37","repo":"jdx/mise","slug":"config-file-s-in-are-not-trusted-trust-the","errorCode":null,"errorMessage":"Config file(s) in {} are not trusted: {}\nTrust them with `mise trust`. See https://mise.jdx.dev/cli/trust.html for more information.","messagePattern":"Config file\\(s\\) in (.+?) are not trusted: (.+?)\nTrust them with `mise trust`\\. See https://mise\\.jdx\\.dev/cli/trust\\.html for more information\\.","errorType":"exception","errorClass":null,"httpStatus":null,"severity":"error","filePath":"src/task/task_list.rs","lineNumber":317,"sourceCode":"            let safe_mode = config::Settings::safe_mode();\n            let config_files = config_files_in_dir(cwd);\n            let untrusted_configs: Vec<_> = config_files\n                .iter()\n                .filter(|p| {\n                    !safe_mode\n                        && !is_tool_versions_file(p)\n                        && !is_trusted(&config_trust_root(p))\n                        && !is_trusted(p)\n                })\n                .collect();\n\n            if !untrusted_configs.is_empty() {\n                let paths = untrusted_configs\n                    .iter()\n                    .map(display_path)\n                    .collect::<Vec<_>>()\n                    .join(\", \");\n                bail!(\n                    \"Config file(s) in {} are not trusted: {}\\nTrust them with `mise trust`. See https://mise.jdx.dev/cli/trust.html for more information.\",\n                    display_path(cwd),\n                    paths\n                );\n            }\n        }\n\n        if let Some(task) = make_task_executable(config, name, task_context).await? {\n            return Ok(Some(task));\n        }\n\n        // Check if there are non-executable files in task include directories\n        if let Some(cwd) = &*dirs::CWD {\n            let includes = config::task_includes_for_dir(cwd, &config.config_files)?;\n            let excludes = config::task_excludes_for_dir(cwd, &config.config_files)?;\n            let non_exec_files = find_non_executable_task_files(&includes, &excludes);\n            // The remedy differs by platform and `make_executable_hint` is the only thing that\n            // knows how, so it gets one file to name rather than the list. The count and the","sourceCodeStart":299,"sourceCodeEnd":335,"githubUrl":"https://github.com/jdx/mise/blob/afd2eddd3a50c16190efc1c7e94404b48f72af57/src/task/task_list.rs#L299-L335","documentation":"mise refuses to load tasks from configuration files that have not been marked trusted, because config files can execute arbitrary code. When no task matches and untrusted config files exist in the current directory, err_no_task bails with this message listing the files and pointing at `mise trust`.","triggerScenarios":"Running a task from a directory whose mise.toml / .mise.toml / config files were created or modified after last trusting them (new checkout, cloned repo, edited config) so `is_trusted` returns false.","commonSituations":"Freshly cloned a repo and immediately ran `mise run build`; pulled changes that touched a previously trusted config (hash changed); mise was upgraded to require re-trusting; CI checkout without trust step.","solutions":["Run `mise trust` in the project directory to trust the listed config files, then rerun the task","In CI/automation, trust non-interactively up front (e.g. `mise trust` step or the MISE_TRUSTED_CONFIG_PATHS env setting)","Verify the config files are from a source you trust before trusting them"],"exampleFix":"# before\n$ mise run build\nError: Config file(s) in ~/proj are not trusted: ~/proj/mise.toml\n\n# after\n$ mise trust\n$ mise run build","handlingStrategy":"validation","validationCode":"mise trust --dry-run 2>/dev/null || mise trust","typeGuard":null,"tryCatchPattern":"mise run \"$TASK\" || { mise trust && mise run \"$TASK\"; }","preventionTips":["Run `mise trust` immediately after cloning a repo","Add a `mise trust` step at the start of CI pipelines","Re-trust after pulling changes that modify mise config files","Only trust configs from sources you vet"],"tags":["security","trust","tasks","config"],"backgroundTag":"authentication-required","analyzedSha":"afd2eddd3a50c16190efc1c7e94404b48f72af57","analyzedAt":"2026-09-09T01:38:25.179Z","contentChangedAt":"2026-09-09T01:38:25.179Z","schemaVersion":2},"datasetVersion":"2026-09-14T05:17:10.506Z"}