Skip to content

feat(action): Add claude action#76

Merged
genedna merged 1 commit into
libra-tools:mainfrom
genedna:main
Jan 13, 2026
Merged

feat(action): Add claude action#76
genedna merged 1 commit into
libra-tools:mainfrom
genedna:main

Conversation

@genedna

@genedna genedna commented Jan 13, 2026

Copy link
Copy Markdown
Contributor

No description provided.

Signed-off-by: Quanyi Ma <eli@patch.sh>
Copilot AI review requested due to automatic review settings January 13, 2026 16:01
@genedna
genedna merged commit 17b96c7 into libra-tools:main Jan 13, 2026
9 checks passed
Comment on lines +54 to +60
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 0
ref: ${{ github.event_name == 'pull_request_target' && github.event.pull_request.head.sha || github.sha }}

- name: Checkout PR Branch (for comments)

Check failure

Code scanning / CodeQL

Checkout of untrusted code in trusted context High

Potential execution of untrusted code on a privileged workflow (
issue_comment
)
Comment on lines +60 to +67
- name: Checkout PR Branch (for comments)
if: ${{ github.event_name == 'issue_comment' || github.event_name == 'pull_request_review_comment' }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
gh pr checkout ${{ github.event.issue.number || github.event.pull_request.number }}

- name: PR Review with Progress Tracking

Check failure

Code scanning / CodeQL

Checkout of untrusted code in trusted context High

Potential execution of untrusted code on a privileged workflow (
issue_comment
)
Comment on lines +60 to +67
- name: Checkout PR Branch (for comments)
if: ${{ github.event_name == 'issue_comment' || github.event_name == 'pull_request_review_comment' }}
env:
GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
run: |
gh pr checkout ${{ github.event.issue.number || github.event.pull_request.number }}

- name: PR Review with Progress Tracking

Check failure

Code scanning / CodeQL

Untrusted Checkout TOCTOU High

Insufficient protection against execution of untrusted code on a privileged workflow (
issue_comment
).
@github-actions github-actions Bot mentioned this pull request Jan 15, 2026
genedna added a commit to genedna/git-internal that referenced this pull request Mar 15, 2026
Signed-off-by: Quanyi Ma <eli@patch.sh>
@genedna
genedna removed the request for review from Copilot March 23, 2026 19:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants