safe-global / safe-client-gateway / 22763996870 / 1

90%

main: 90%

push

github

fix: WA-1690 - harden Claude code review workflow against prompt injection (#2965)

Restrict bot trigger to MEMBER, OWNER, and COLLABORATOR author
associations to prevent external users from invoking Claude via PR
comments. Remove unnecessary id-token: write permission.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2271 of 4018 branches covered (56.52%)

Branch coverage included in aggregate %.

25669 of 31087 relevant lines covered (82.57%)

240.07 hits per line