Skip to content

Guard agent tasks against PR merges and pin Claude actions - #4

Merged
tiffling merged 1 commit into
mainfrom
feature/block-gh-api-merges-dfe2c7
Sep 22, 2026
Merged

tiffling merged 1 commit into
mainfrom
feature/block-gh-api-merges-dfe2c7

Conversation

@tiffling

@tiffling tiffling commented Sep 22, 2026 •

Copy link
Copy Markdown
Contributor

Summary

  • Add an inline PreToolUse guard to agent-task jobs to block gh pr merge and merge attempts through gh api; also disallow gh pr merge as a tool.
  • Pin anthropics/claude-code-action to a commit that allows opus-5-5 use

The command guard is a guardrail, not a security boundary; enforce hard merge restrictions with GitHub branch rules.

@tiffling
tiffling force-pushed the feature/block-gh-api-merges-dfe2c7 branch from 26e9a5f to 3002cd2 Compare September 22, 2026 20:50
@tiffling tiffling changed the title Guard agent tasks against PR merges and run tests on PRs Guard agent tasks against PR merges and pin Claude actions Sep 22, 2026
@tiffling
tiffling merged commit 53e87c2 into main Sep 22, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant