Skip to content

v2.0.3 — hardened Claude PR reviewer

Choose a tag to compare

View all tags
@nsportsman nsportsman released this 19 Apr 16:30
v2.0.3
704fc67
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Bundles #18 + #19 into one release.

What's in v2.0.3

PR #18 — core hardening:

  • author_association gate blocks prompt-injection from external PRs
  • --allowedTools restricts Claude to Bash(gh pr comment/diff/view:*), Read, Grep, Glob
  • direct_prompt → prompt (v1 idiom with hardened content handling)
  • --max-turns 10

PR #19 — inline review + defense-in-depth:

  • mcp__github_inline_comment__create_inline_comment added — CodeRabbit-style line-anchored review, Anthropic's purpose-built MCP, scoped to current PR
  • --disallowedTools floor blocks curl/wget/gh api/gh auth/Write/Edit/MultiEdit even if allowlist is ever re-expanded (defense vs claude-code-action#860)
  • CODEOWNERS requires praetorian-inc/security-engineering review on future claude-code.yml changes

Caller pin line

uses: praetorian-inc/public-workflows/.github/workflows/claude-code.yml@704fc675c55d6af6e5536a1e416a1400a1e28c2f  # v2.0.3

Migration tracking

  • ENG-3113 — 45 existing callers (12 stale-SHA urgent, 33 @main pin-for-hygiene)
  • ENG-3114 — 3 direct anthropics/claude-code-action callers to migrate

Contributors

main
Assets 2
Loading