GitHub Blocks Automatic Code Checkouts from Forked Pull Requests25. June 2026Claude Code, CybersecurityGitHub blocks by default the automatic loading of code from forked pull requests in privileged workflows to prevent attackers from stealing GITHUB_TOKEN and environment variables. Share on: