Claude Code GitHub Actions flaw enables CI hijacking and secret theft
Security researcher RyotaK uncovered a permission bypass and prompt injection in Anthropic's Claude Code GitHub Actions, allowing attackers to run workflows on public repos, read /proc/self/environ, and exfiltrate secrets, potentially compromising downstream repositories. Anthropic fixed the bugs in version 1.0.94.