What the developer wrote
Authored by f321x
ci: security review: log effort level
If the model is logged it makes sense to log the effort level as well.
What changed, and why it matters
This commit only changes two log/comment messages in a CI security-review script so they include the configured 'effort level' alongside the model name. It does not alter application logic, cryptography, networking, wallet handling, or any user-facing behavior. There is no security issue here.
No action required; this is a benign CI logging/labeling change.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The patch modifies contrib/ci/claude_security_review.py to append ‘at {CLAUDE_EFFORT} effort’ to a GitHub comment footer and to a console print statement. Both strings already referenced the existing CLAUDE_MODEL variable; the change simply adds another existing configuration variable for informational logging. No code paths, permissions, inputs, or outputs are functionally changed.
Changed components
contrib/ci/claude_security_review.pyInspect captured patch +2 / −2
diff --git a/contrib/ci/claude_security_review.py b/contrib/ci/claude_security_review.py
index 342bf7a..1579afe 100644
--- a/contrib/ci/claude_security_review.py
+++ b/contrib/ci/claude_security_review.py
@@ -158,7 +158,7 @@ def post_github_comment(body: str, *, repo: str, pr: str) -> None:
f"## Security Review -- Issues Found\n\n"
f"{body}\n\n"
f"---\n"
- f"*Reviewed by Claude Code ({CLAUDE_MODEL})*"
+ f"*Reviewed by Claude Code ({CLAUDE_MODEL}) at {CLAUDE_EFFORT} effort*"
)
if log_url:
comment += f" | [Full CI log]({log_url})"
@@ -243,7 +243,7 @@ def main() -> int:
user_prompt = build_user_prompt(diff, changed_files, commit_messages)
system_prompt = read_system_prompt()
- print(f"\nRunning Claude Code review (model: {CLAUDE_MODEL})...\n")
+ print(f"\nRunning Claude Code review (model: {CLAUDE_MODEL}) at {CLAUDE_EFFORT} effort...\n")
review = run_claude(user_prompt, system_prompt)
if review is None:
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.