Source Intelligence
Follow Discord

DisclaimerUnofficial, and not affiliated with Anthropic. Nearly all of this is read straight out of what ships: npm bundles, captured prompts, published docs. Anthropic's own notes go in verbatim, marked as theirs. The rest is my reading, and every entry carries the strings behind it. If one looks wrong, vote it down and say why.

← All of v2.1.239 Home All releases ←olderv2.1.238 v2.1.240newer→
Claude Code v2.1.239

GitHub Actions input copies of secret variables are now scrubbed too

You'll notice
Useful3 Signal2
Secret Scrubbing

GitHub Actions INPUT_-prefixed copies of secret variables are now scrubbed too.

What

The list of environment variables Claude Code refuses to expose now also covers the INPUT_-prefixed copy of each one, which is the form GitHub Actions uses when a secret is passed in as a workflow input.

Details
  • The base list already included ANTHROPIC_AUTH_TOKEN, AWS_SESSION_TOKEN, ACTIONS_RUNTIME_TOKEN and SSH_SIGNING_KEY among others.
  • The prefixed names are built at runtime from the base list, so any future addition to the denylist is covered automatically.
Evidence

ACTIONS_RUNTIME_TOKEN

Strings lifted out of the shipped bundle, so the claim above can be checked against them.

See this entry in the whole of v2.1.239 →