secrets

2 questions

AI

How do I wire Claude Code into my GitHub PRs without giving it my production secrets?

Install the Claude Code GitHub Action via /install-github-app, scope ANTHROPIC_API_KEY as a repo or environment secret, and pass only the secrets a PR job actually needs. The webhook is GitHub's; the work runs on GitHub's runners; the failure mode is mis-scoped secrets, not the action itself.
AI

How do I stop Claude Code from leaking my .env to a tool call?

Deny rules in .claude/settings.json catch Read(.env*) and the obvious Bash escape hatches (env, printenv, cat .env*, git diff*); a PreToolUse hook adds belt-and-suspenders. Allowlists are cleaner long-term. Auto mode is the place this leaks first.