Andy DixonandClaude Opus 5.5 3264def658 AI codebase review ...

fix: sanitise snapshot follow mode; least-privilege CI token

The scan-info view printed the snapshot's "follow" metadata string
unsanitised (the canvas filter was the only defence). The CI workflow
ran with the repository's default GITHUB_TOKEN permissions; it only
needs to read the code.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-02 10:59:54 +01:00

..

workflows

AI codebase review

2026-10-02 10:59:54 +01:00