From 8a9df4f1f6113a074824558f3d192dceee3e156a Mon Sep 17 00:00:00 2001 From: anupsv Date: Sun, 10 Aug 2025 21:17:01 -0700 Subject: [PATCH 1/3] Create claude-security-reviewer.yaml --- claude-security-reviewer.yaml | 24 ++++++++++++++++++++++++ 1 file changed, 24 insertions(+) create mode 100644 claude-security-reviewer.yaml diff --git a/claude-security-reviewer.yaml b/claude-security-reviewer.yaml new file mode 100644 index 0000000..f584eb8 --- /dev/null +++ b/claude-security-reviewer.yaml @@ -0,0 +1,24 @@ +name: Security Review + +permissions: + pull-requests: write + contents: read + +on: + pull_request: + branches: + - main + +jobs: + security: + runs-on: ubuntu-latest + steps: + - uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683 # 4.2.2 + with: + ref: ${{ github.event.pull_request.head.sha || github.sha }} + fetch-depth: 2 + + + - uses: Layr-Labs/security-shared-workflows/actions/claude-pr-review@713409e1ebdd156dcc1b5dced0f0fbb063b0fee5 + with: + claude-api-key: ${{ secrets.ORG_ANTHROPIC_API_KEY }} From 1d40d59d6231a3c3e2e82d82b3940f7026acacaf Mon Sep 17 00:00:00 2001 From: anupsv Date: Sun, 10 Aug 2025 21:17:24 -0700 Subject: [PATCH 2/3] Update claude-security-reviewer.yaml --- claude-security-reviewer.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/claude-security-reviewer.yaml b/claude-security-reviewer.yaml index f584eb8..5e93e92 100644 --- a/claude-security-reviewer.yaml +++ b/claude-security-reviewer.yaml @@ -7,7 +7,7 @@ permissions: on: pull_request: branches: - - main + - master jobs: security: From a60ba32e7732c14229d3c274bb6cdb0e40b5c9b5 Mon Sep 17 00:00:00 2001 From: anupsv Date: Sun, 10 Aug 2025 21:18:03 -0700 Subject: [PATCH 3/3] Rename claude-security-reviewer.yaml to .github/workflows/claude-security-reviewer.yaml --- .../workflows/claude-security-reviewer.yaml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename claude-security-reviewer.yaml => .github/workflows/claude-security-reviewer.yaml (100%) diff --git a/claude-security-reviewer.yaml b/.github/workflows/claude-security-reviewer.yaml similarity index 100% rename from claude-security-reviewer.yaml rename to .github/workflows/claude-security-reviewer.yaml