Novee Security showed a GitHub issue could reach CI secrets through Claude Code Action, the Gemini CLI action and an OpenAI Codex workflow.
CVE-2026-54316 is a Claude Code CLI bug fixed in 2.1.163; Gemini's CVSS 10.0 advisory is fixed in Gemini CLI 0.39.1 and run-gemini-cli 0.1.22.
Gemini's fix is a breaking change: headless runs now need explicit folder trust, so upgrading alone may change your workflow.
Remove write permissions from jobs that read untrusted text, split privileged work into separate jobs, and treat files the workflow wrote as untrusted.