ci: Don't read claude settings from the repo

Shouldn't be possible, but extra hardening never hurts.
2026-03-18 13:48:55 +01:00
parent 20a8f5832a
commit fb2cf9f557
1 changed files with 1 additions and 0 deletions
@@ -264,6 +264,7 @@ jobs:
            --model us.anthropic.claude-opus-4-6-v1
            --max-turns 200
            --disallowedTools "WebFetch,WebSearch,Agent,TaskCreate"
+            --setting-sources user
            --json-schema '${{ env.REVIEW_SCHEMA }}'
          prompt: |
              REPO: ${{ github.repository }}