mirror of
https://github.com/thedotmack/claude-mem
synced 2026-04-25 17:15:04 +02:00
fb8c9dbdbe
The gh issue comment command was interpolating the LLM response via
${{ steps.inference.outputs.response }} directly in the shell, allowing
single-quote escaping if the response contained untrusted content.
RESPONSE was already declared as an env var but unused — now using it.
Closes #1285
Co-Authored-By: Claude <noreply@anthropic.com>
35 lines
851 B
YAML
35 lines
851 B
YAML
name: Summarize new issues
|
|
|
|
on:
|
|
issues:
|
|
types: [opened]
|
|
|
|
jobs:
|
|
summary:
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
issues: write
|
|
models: read
|
|
contents: read
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
|
|
- name: Run AI inference
|
|
id: inference
|
|
uses: actions/ai-inference@v2
|
|
with:
|
|
prompt: |
|
|
Summarize the following GitHub issue in one paragraph:
|
|
Title: ${{ github.event.issue.title }}
|
|
Body: ${{ github.event.issue.body }}
|
|
|
|
- name: Comment with AI summary
|
|
run: |
|
|
gh issue comment "$ISSUE_NUMBER" --body "$RESPONSE"
|
|
env:
|
|
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
|
ISSUE_NUMBER: ${{ github.event.issue.number }}
|
|
RESPONSE: ${{ steps.inference.outputs.response }}
|