Post
Microsoft Threat Intelligence
threatintel.microsoft.com
did:plc:ezrjx3qddwj4azn373c2ipdg
Microsoft discovered that Anthropic's Claude Code GitHub Action could expose CI/CD workflow secrets when AI agents process untrusted content, including issue bodies, pull request descriptions, and comments. msft.it/63323vdfLh
https://msft.it/63323vdfLh
2026-06-05T17:52:18.167Z