graphiti/.github/workflows
Daniel Chalef b7358e52eb
Secure Claude PR reviews with two-workflow approach (#999)
Fixes permission errors for fork PRs while maintaining security.

Changes:
- Split into automatic (internal) and manual (fork) workflows
- Add fork detection to prevent auto-review of external PRs
- Add security-hardened prompts preventing secret disclosure
- Create manual workflow for maintainer-triggered fork reviews
- Add friendly notification for external contributors

Security model:
- Internal PRs: Auto-reviewed (trusted contributors)
- Fork PRs: Human gate-keeping required before optional Claude review
- Prevents prompt injection attacks via untrusted PR content

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-12 09:41:13 -07:00
..
ai-moderator.yml feat: Add GitHub AI Moderator for automated spam detection (#856) 2025-08-25 07:25:07 -07:00
cla.yml Update cla.yml (#884) 2025-08-30 08:23:53 -07:00
claude-code-review-manual.yml Secure Claude PR reviews with two-workflow approach (#999) 2025-10-12 09:41:13 -07:00
claude-code-review.yml Secure Claude PR reviews with two-workflow approach (#999) 2025-10-12 09:41:13 -07:00
claude.yml Update claude.yml (#877) 2025-08-28 20:58:00 -07:00
codeql.yml Create codeql.yml (#580) 2025-06-12 19:04:34 -07:00
daily_issue_maintenance.yml Refactor issue workflows for improved automation (#964) 2025-10-02 11:37:19 -07:00
issue-triage.yml Update issue triage workflow to allow non-write users for duplicate checks (#974) 2025-10-03 09:20:28 -07:00
lint.yml depot + cleanup (#22) 2024-08-22 15:16:15 -07:00
mcp-server-docker.yml Add GitHub Actions workflow for building and pushing MCP Server Docker image (#656) 2025-07-01 15:55:08 -07:00
release-graphiti-core.yml Update release-graphiti-core.yml to python 3.11 (#639) 2025-06-27 14:27:21 -07:00
typecheck.yml Potential fix for code scanning alert no. 18: Workflow does not contain permissions (#648) 2025-06-30 13:01:42 -07:00
unit_tests.yml Separate unit, database, and API integration tests (#997) 2025-10-12 09:07:24 -07:00