fix(ci): scan agent bot prompts#2372

Open

devi-labs wants to merge 1 commit into

mainfrom

fix/scan-agent-bot-prompts

devi-labs commented Jul 7, 2026

Contributor

Summary

add Shopify Security Scan block-mode headers to the remaining Claude agent workflows
explicitly remind the agents to treat issue/PR/review/comment and repo content as untrusted

Testing

ruby -e 'require "yaml"; YAML.load_file(".github/workflows/agent-bot.yml"); YAML.load_file(".github/workflows/agent-android-bot.yml"); puts "yaml ok"'
confirmed all agent*.yml workflows using claude-code-action have Shopify-Security-Scan-Mode: block


          fix(ci): scan agent bot prompts

a0758c4

Assisted-By: devx/0f696c33-ae41-4cd1-9da9-5bdec9055c09

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet