Tam Nhu Tran dcb46356f3 fix(ci): load review prompt from base branch to prevent prompt injection ...

External PRs could modify review-prompt.md to suppress findings or
manipulate the reviewer. Now loads prompt via git show from the base
branch (origin/dev or origin/main), never from PR-controlled checkout.

Also:
- Fallback prompt upgraded with adversarial framing and severity output
- Use printf instead of echo for content preservation
- Expand deep review trigger to all .github/ files (not just workflows/)

2026-03-16 07:47:59 -04:00

..

workflows

fix(ci): load review prompt from base branch to prevent prompt injection

2026-03-16 07:47:59 -04:00

FUNDING.yml

chore: add GitHub Sponsors funding configuration

2025-12-11 20:52:17 -05:00

review-prompt.md

fix(ci): load review prompt from base branch to prevent prompt injection

2026-03-16 07:47:59 -04:00