mirror of
https://github.com/anthropics/claude-code-action.git
synced 2026-07-27 22:38:30 +08:00
c93e8fe879
* docs: add pull_request_target/workflow_run guidance and base-action trust model Adds a security.md section on safe checkout patterns under pull_request_target/workflow_run, and a trust-model section to the base-action README clarifying that callers are responsible for the working directory and prompt being trusted. 🏠 Remote-Dev: homespace * docs: refine PRT/workflow_run guidance — root checkout + workflow_run ref Second example now checks out the base ref at the workspace root before the head-ref subdirectory checkout (this action expects a git repo at the root). Adds the workflow_run ref form, drops the PRT-specific gh-pr-diff hint from the first example, and generalises the closing line to cover both event types. 🏠 Remote-Dev: homespace * docs: use actions/checkout@v6 in examples (consistency) 🏠 Remote-Dev: homespace