claude-code/.github/workflows
Boris Cherny 80ceacaa78
Re-add log-issue-events workflow with security fix
Re-implements the workflow removed in #5919, but with proper security:
- All GitHub event data is now passed via environment variables
- No direct templating of values into shell commands
- Prevents remote code execution through malicious issue titles
- Still escapes quotes in JSON payload for proper formatting

This fixes the security vulnerability while maintaining the functionality
of logging issue creation events to Statsig.

🤖 Generated with [Claude Code](https://claude.ai/code)

Co-Authored-By: Claude <noreply@anthropic.com>
2025-08-18 09:56:56 -07:00
..
auto-close-duplicates.yml fix: update auto-close-duplicates workflow permissions to write 2025-08-15 10:55:50 -07:00
backfill-duplicate-comments.yml Add workflow to backfill duplicate comments 2025-08-08 12:11:08 -07:00
claude-dedupe-issues.yml Add Statsig event logging to GitHub issue workflows 2025-08-08 18:26:48 -07:00
claude-issue-triage.yml Add checkout step to issue triage workflow (#2867) 2025-07-02 09:01:44 -07:00
claude.yml kept beta as per request 2025-05-31 11:04:37 +02:00
lock-closed-issues.yml Remove timeout-minutes from lock-closed-issues workflow (#5455) 2025-08-09 10:58:52 -07:00
log-issue-events.yml Re-add log-issue-events workflow with security fix 2025-08-18 09:56:56 -07:00