anthropics / anthropics/claude-code
Claude wrote a secret to the wrong location despite explicit, unambiguous instructions
- 主要言語
- Python
- スター
- 145k
- フォーク
- 23.1k
- PR マージ指標
- PR 指標を取得中
説明
Asked Claude to create a database-password secret in two GitHub repos (`learning-ops` and `learning-infra`), specifying it needed to exist as a GitHub Actions environment secret in both `staging` and `production` environments on both repos, with matching values per environment.
Claude correctly created the GitHub secrets on `learning-ops`, but for `learning-infra` it instead wrote the value directly into Azure Key Vault — a different system, using a pattern that didn't match how every comparable secret in that codebase already works (as a GitHub environment secret consumed at deploy time, not a directly-written Key Vault value). The instruction named the exact secret name and exact two repos; there wasn't real ambiguity to misread.
When corrected, Claude fixed it accurately and cleaned up the incorrect Key Vault secrets on request, but the initial error should not have happened given how explicit the original instructions were.
コントリビューションガイド
このリポジトリのコントリビューションガイドは索引されていません
調査の方向性
No file, test, or entry point is named. Start by reproducing the request across learning-ops and learning-infra, then trace how Claude selects between GitHub environment secrets and Azure Key Vault. Done means the requested values are created only in the specified staging and production GitHub environments for both repositories, with no unintended Key Vault secrets.
索引モデルが issue の本文から書いたものです。
評価
- 技術スタック
- azure, github-actions
- 領域
- cloud, devops, security
- issue の種類
- バグ
- 難易度
- 4/5
- 見積もり時間
- 3〜5日
- 活発さ
- 活発
- 明瞭さ
- おおむね明確
- 初心者へのやさしさ
- 45/100