[DevOps] Tighten security & workflow permissions for claude workflow - #733

Draft

lisa-tarbo wants to merge 6 commits into

mainfrom

security-claude-workflow

Commits on Sep 4, 2026

Removed permissions not used as use GitHub app
lisa-tarbo
committed
e5d22eb
Added comment re how claude-code-action does branching
lisa-tarbo
committed
bd247a0
Add workflow gate to stop false runs of Claude with regex check for real mention of trigger.
lisa-tarbo
committed
e0785c4
Added a "Resolve checkout ref" step, issues event falls back to githhub.ref as no pr branch
lisa-tarbo
committed
35dc012
Simpiflied header comments
lisa-tarbo
committed
0edf0b8
Review fixes. Reverted "Resolve checkout ref" step. Simplified comments that not 100% accurate
lisa-tarbo
committed
425b51e