Skip to content

Restrict Claude Step Summary output to debug runs #24

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
danielorbach merged 2 commits into from
Mar 17, 2026
Merged

Restrict Claude Step Summary output to debug runs #24

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6fc297d
github: gate Claude Step Summary on debug mode
danielorbach Mar 17, 2026
ec9c6e0
github: document prompt injection mitigation in workflow header
danielorbach Mar 17, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
12 changes: 10 additions & 2 deletions .github/workflows/claudependabot.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -16,6 +16,14 @@
# Squash commits default to using the PR description as body, but Dependabot
# PRs include lengthy changelogs and compatibility notes. Each step overrides
# the body to keep commit messages clean.
#
# Prompt injection: claude-code-action steps can be susceptible to prompt
# injection when triggered by untrusted actors (e.g. arbitrary issue
# commenters). The review job's actor gate restricts execution to the
# dependabot[bot] actor, which is a trusted first-party automation source.
# Claude may still fetch external content during analysis (changelogs,
# release notes), but gating on a trusted actor is considered a sufficient
# mitigation for the Step Summary rendering surface.

name: "🤖 ClauDependabot"

Expand Down Expand Up @@ -73,7 +81,7 @@ jobs:
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
allowed_bots: dependabot
display_report: true
display_report: ${{ runner.debug == '1' }}
prompt: |
This is a Dependabot PR for a minor version update.

Expand Down Expand Up @@ -110,7 +118,7 @@ jobs:
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
allowed_bots: dependabot
display_report: true
display_report: ${{ runner.debug == '1' }}
prompt: |
This is a Dependabot PR for a MAJOR version update.

Expand Down
Loading