coily-action: GitHub Action wrapper for lockdown-audited Claude Code runs #61
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally filed by @coilysiren on 2026-05-03T19:53:46Z - https://github.com/coilysiren/coily/issues/42
Inspiration:
anthropics/claude-code-actionandanthropics/claude-code-base-action- reusable Action shape for running Claude Code in CI. See alsoanthropics/claude-code-security-reviewfor the security framing.Joins against:
coily/docs/features/03-lockdown.md, the "coily as a safety boundary for AI agents" blog issue (#11), and the bare-write deny rules in~/.claude/settings.json.Anthropic ships the reusable Action; Kai ships the lockdown layer. A
coilysiren/coily-actionwould marry them: Claude Code in CI, but argv-validated and audit-logged via coily, so the agent can't shell out to anything not on the allowlist. The selling point is a single value prop ("audited Claude Code in CI") that's hard to assemble out of existing pieces. Pairs naturally with the security-boundary blog post.Moved from coilysiren/coilyco-ai#29.
Iceboxed in the 2026-05-29 backlog burn-down: Speculative GitHub Action wrapper, inspired by external repos. Reopen anytime if it becomes real.