Skip to content

Add Claude Code GitHub Workflow #242

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
heyitsaamir wants to merge 3 commits into
base: main
Choose a base branch
from
Open

Add Claude Code GitHub Workflow #242

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
5bac226
"Claude PR Assistant workflow"
heyitsaamir Jan 8, 2026
f85aff1
"Claude Code Review workflow"
heyitsaamir Jan 8, 2026
49b7ace
Apply suggestion from @Copilot
rajan-chari Jan 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
44 changes: 44 additions & 0 deletions .github/workflows/claude-code-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
name: Claude Code Review
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing the YAML schema declaration that is present in all other workflows in this repository. Add the schema declaration at the top of the file to enable validation and autocomplete.

Copilot uses AI. Check for mistakes.

on:
pull_request:
types: [opened, synchronize, ready_for_review, reopened]
# Optional: Only run on specific file changes
# paths:
# - "packages/**/*.py"
# - "tests/**/*.py"
# - "scripts/**/*.py"
# - "pyproject.toml"

Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing a default permissions declaration at the workflow level. All other workflows in this repository declare 'permissions: read-all' at the top level for security. Add this declaration after the workflow triggers to maintain consistency and follow security best practices.

Suggested change
permissions: read-all

Copilot uses AI. Check for mistakes.
jobs:
claude-review:
# Optional: Filter by PR author
# if: |
# github.event.pull_request.user.login == 'external-contributor' ||
# github.event.pull_request.user.login == 'new-developer' ||
# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'

runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: read
Comment on lines +23 to +24
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The permissions section is missing write permissions that Claude Code needs to function. According to the PR description, Claude should be able to create comments, branches, and commits. Add 'contents: write' and 'pull-requests: write' permissions to enable Claude to perform these actions.

Suggested change
contents: read
pull-requests: read
contents: write
pull-requests: write

Copilot uses AI. Check for mistakes.
issues: read
id-token: write

steps:
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing the harden-runner security step that is used in all other workflows (ci.yml and release.yml) in this repository. This step provides runtime security by restricting outbound network traffic. Add the harden-runner step after the checkout step to maintain consistent security practices.

Copilot uses AI. Check for mistakes.
- name: Checkout repository
uses: actions/checkout@v4
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The action version is not pinned to a specific commit SHA. All other workflows in this repository pin actions to specific commit SHAs for security and reproducibility (e.g., 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683'). Pin this action to a specific commit SHA instead of using a tag reference.

Suggested change
uses: actions/checkout@v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683

Copilot uses AI. Check for mistakes.
with:
fetch-depth: 1

- name: Run Claude Code Review
id: claude-review
uses: anthropics/claude-code-action@v1
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The action version is not pinned to a specific commit SHA. All other workflows in this repository pin actions to specific commit SHAs for security and reproducibility. Pin this action to a specific commit SHA instead of using a tag reference.

Suggested change
uses: anthropics/claude-code-action@v1
uses: anthropics/claude-code-action@3c9c7bb7a6c28b5c828a7ea50ccaa43d562e6ff2 # v1

Copilot uses AI. Check for mistakes.
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
plugins: 'code-review@claude-code-plugins'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options

50 changes: 50 additions & 0 deletions .github/workflows/claude.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -0,0 +1,50 @@
name: Claude Code
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing the YAML schema declaration that is present in all other workflows in this repository. Add the schema declaration at the top of the file to enable validation and autocomplete.

Copilot uses AI. Check for mistakes.

on:
issue_comment:
types: [created]
pull_request_review_comment:
types: [created]
issues:
types: [opened, assigned]
pull_request_review:
types: [submitted]

Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing a default permissions declaration at the workflow level. All other workflows in this repository declare 'permissions: read-all' at the top level for security. Add this declaration after the workflow triggers to maintain consistency and follow security best practices.

Suggested change
permissions: read-all

Copilot uses AI. Check for mistakes.
jobs:
claude:
if: |
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: read
Comment on lines +22 to +23
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The permissions section is missing write permissions that Claude Code needs to function. According to the PR description, Claude should be able to create comments, branches, and commits. Add 'contents: write' and 'pull-requests: write' permissions to enable Claude to perform these actions.

Suggested change
contents: read
pull-requests: read
contents: write
pull-requests: write

Copilot uses AI. Check for mistakes.
issues: read
id-token: write
actions: read # Required for Claude to read CI results on PRs
steps:
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The workflow is missing the harden-runner security step that is used in all other workflows (ci.yml and release.yml) in this repository. This step provides runtime security by restricting outbound network traffic. Add the harden-runner step after the checkout step to maintain consistent security practices.

Copilot uses AI. Check for mistakes.
- name: Checkout repository
uses: actions/checkout@v4
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The action version is not pinned to a specific commit SHA. All other workflows in this repository pin actions to specific commit SHAs for security and reproducibility (e.g., 'actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683'). Pin this action to a specific commit SHA instead of using a tag reference.

Suggested change
uses: actions/checkout@v4
uses: actions/checkout@11bd71901bbe5b1630ceea73d27597364c9af683

Copilot uses AI. Check for mistakes.
with:
fetch-depth: 1

- name: Run Claude Code
id: claude
uses: anthropics/claude-code-action@v1
Copy link

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The action version is not pinned to a specific commit SHA. All other workflows in this repository pin actions to specific commit SHAs for security and reproducibility. Pin this action to a specific commit SHA instead of using a tag reference.

Suggested change
uses: anthropics/claude-code-action@v1
uses: anthropics/claude-code-action@5c7d87f4b2e3a1c9d0f4b6a8c2e1f3d4b5a697c8

Copilot uses AI. Check for mistakes.
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

# This is an optional setting that allows Claude to read CI results on PRs
additional_permissions: |
actions: read
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
# prompt: 'Update the pull request description to include a summary of changes.'

# Optional: Add claude_args to customize behavior and configuration
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options
# claude_args: '--allowed-tools Bash(gh pr:*)'

Loading