Remove GitHub auth from agent steps to mitigate prompt injection#14

Open

bholmesdev wants to merge 1 commit intomainfrom

benh/agent-write-vulnerability

Commits on Mar 5, 2026

Replace permissive write token with read-only agent access and just-in-time token for applying writes
bholmesdev
committed