l0ng-aiandl0ng-ai 2ddf2bad25 ci: review a fork's diff, never its tree (#392) ...

actions/checkout refuses a fork ref under pull_request_target without
allow-unsafe-pr-checkout, and the flag is not the fix. The working
directory is what Claude Code reads as the project, so checking out a
fork hands it that fork's CLAUDE.md as instructions and that fork's
.claude/settings.json hooks as commands -- neither of which the
--allowedTools list governs. Constraint 2 said nothing from the pull
request is executed; a checked-out tree could not honour it.

Check out the base branch instead and bring the contribution down as
diff text in one file. The reviewer reads the diff against trusted
sources rather than the merged tree, which is less context than the
same-repo path gets, and the right trade for code we do not control.

Co-authored-by: l0ng-ai <24760907+l0ng-ai@users.noreply.github.com>

2026-08-07 22:42:43 +08:00

..

ISSUE_TEMPLATE

tty7: a GPU-rendered, daemon-backed terminal in pure Rust

2026-07-06 21:54:27 +08:00

scripts

fix(bundle): declare macOS TCC privacy keys for child processes (#323)

2026-08-07 11:15:22 +08:00

workflows

ci: review a fork's diff, never its tree (#392)

2026-08-07 22:42:43 +08:00

dependabot.yml

tty7: a GPU-rendered, daemon-backed terminal in pure Rust

2026-07-06 21:54:27 +08:00