Securing CI/CD in an agentic world: Claude Code Github action case
2026-06-08T14:52:22Z•cc8f77a37fff55db2e164f3db5be4dc84a1f11bb659d6ab9aa63ac8a71a8cdad
AnthropicCI/CDClaude CodeGitHub Actionsagentic AImitigationsprompt injectionsecret exfiltrationsecure developmentsupply chainvulnerability disclosureworkflow secrets
What happened
Microsoft Threat Intelligence discovered a prompt‑injection pathway in the Claude Code GitHub Action (Anthropic) that under specific conditions could access and exfiltrate GitHub Actions workflow secrets. The research outlines the attack chain, responsible disclosure to Anthropic, their mitigations, and recommended controls for securing AI‑powered CI/CD (least privilege, pin action versions, limit internet access, use ephemeral/OIDC tokens, rotate and audit secrets, and improve prompt hardening and red‑teaming). The finding highlights broader risks for agentic AI in CI/CD including credential/
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- cc8f77a37fff55db2e164f3db5be4dc84a1f11bb659d6ab9aa63ac8a71a8cdad
- Enrichment time
- 2026-06-08T14:52:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.