Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets

GitHub issue with no repository privileges triggered code execution on CI runners for Claude, Gemini, and OpenAI coding agents, exposing workflow secrets.