Skip to content

Commit 485c970

Browse files
claudeclaude
committed
fix: add git push permission and fix git command format in claude workflow
1 parent 1a00c81 commit 485c970

2 files changed

Lines changed: 97 additions & 0 deletions

File tree

‎.github/workflows/claude-code-review.yml‎

Lines changed: 48 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,48 @@
1+
name: Claude Code Review
2+
3+
on:
4+
pull_request:
5+
types: [opened, synchronize, ready_for_review, reopened]
6+
# Optional: Only run on specific file changes
7+
# paths:
8+
# - "src/**/*.ts"
9+
# - "src/**/*.tsx"
10+
# - "src/**/*.js"
11+
# - "src/**/*.jsx"
12+
13+
jobs:
14+
claude-review:
15+
# Optional: Filter by PR author
16+
# if: |
17+
# github.event.pull_request.user.login == 'external-contributor' ||
18+
# github.event.pull_request.user.login == 'new-developer' ||
19+
# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
20+
21+
runs-on: ubuntu-latest
22+
permissions:
23+
contents: read
24+
pull-requests: read
25+
issues: read
26+
id-token: write
27+
28+
steps:
29+
- name: Checkout repository
30+
uses: actions/checkout@v4
31+
with:
32+
fetch-depth: 1
33+
34+
- name: Run Claude Code Review
35+
id: claude-review
36+
uses: anthropics/claude-code-action@v1
37+
with:
38+
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
39+
track_progress: true
40+
plugin_marketplaces: "https://github.com/anthropics/claude-code.git"
41+
plugins: "code-review@claude-code-plugins"
42+
prompt: "/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}"
43+
allowed_tools: "Glob,Grep,LS,Read,mcp__github_comment__update_claude_comment,mcp__github_ci__get_ci_status,mcp__github_ci__get_workflow_run_details,mcp__github_ci__download_job_log,Bash(gitreset:*),Bash(gitcherry-pick:*),Bash(gitdiff:*),Bash(gitstatus:*),Bash(gitlog:*),Bash(gitadd:*),Bash(gitcommit:*),Bash(gitcheckout:*),Bash(gitmerge:*),Bash(gitrebase:*),Bash(/home/runner/work/_actions/anthropics/claude-code-action/v1/scripts/git-push.sh:*),Bash(gitrm:*),Bash(./.venv/bin/*:*),Bash(uv:*),Bash(ruff:*),Bash(ty:*),Bash(python:*),Bash(pytest:*),Bash(npm:*),Bash(pnpm:*),Bash(vp:*),Bash(gh issue:*),Bash(gh pr comment:*),Bash(gh pr view:*),Bash(gh pr diff:*),Bash(gh pr checkout:*)"
44+
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
45+
# or https://code.claude.com/docs/en/cli-reference for available options
46+
# This is an optional setting that allows Claude to read CI results on PRs
47+
additional_permissions: |
48+
actions: read

‎.github/workflows/claude.yml‎

Lines changed: 49 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,49 @@
1+
name: Claude Code
2+
3+
on:
4+
issue_comment:
5+
types: [created]
6+
pull_request_review_comment:
7+
types: [created]
8+
issues:
9+
types: [opened, assigned]
10+
pull_request_review:
11+
types: [submitted]
12+
13+
jobs:
14+
claude:
15+
if: |
16+
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
17+
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
18+
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
19+
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
20+
runs-on: ubuntu-latest
21+
permissions:
22+
contents: write # Claude needs to push commits to branches
23+
pull-requests: write # Claude needs to open/update PRs and post comments
24+
issues: write # Claude needs to comment on issues
25+
id-token: write
26+
actions: read # Required for Claude to read CI results on PRs
27+
steps:
28+
- name: Checkout repository
29+
uses: actions/checkout@v4
30+
with:
31+
fetch-depth: 1
32+
33+
- name: Run Claude Code
34+
id: claude
35+
uses: anthropics/claude-code-action@v1
36+
with:
37+
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
38+
track_progress: true
39+
plugin_marketplaces: "https://github.com/anthropics/claude-code.git"
40+
allowed_tools: "Glob,Grep,LS,Read,mcp__github_comment__update_claude_comment,mcp__github_ci__get_ci_status,mcp__github_ci__get_workflow_run_details,mcp__github_ci__download_job_log,Bash(git reset:*),Bash(git cherry-pick:*),Bash(git diff:*),Bash(git status:*),Bash(git log:*),Bash(git add:*),Bash(git commit:*),Bash(git checkout:*),Bash(git merge:*),Bash(git rebase:*),Bash(git push:*),Bash(/home/runner/work/_actions/anthropics/claude-code-action/v1/scripts/git-push.sh:*),Bash(git rm:*),Bash(./.venv/bin/*:*),Bash(uv:*),Bash(ruff:*),Bash(ty:*),Bash(python:*),Bash(pytest:*),Bash(npm:*),Bash(pnpm:*),Bash(vp:*),Bash(gh issue:*),Bash(gh pr comment:*),Bash(gh pr view:*),Bash(gh pr diff:*),Bash(gh pr checkout:*)"
41+
# This is an optional setting that allows Claude to read CI results on PRs
42+
additional_permissions: |
43+
actions: read
44+
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
45+
# prompt: 'Update the pull request description to include a summary of changes.'
46+
# Optional: Add claude_args to customize behavior and configuration
47+
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
48+
# or https://code.claude.com/docs/en/cli-reference for available options
49+
# claude_args: '--allowed-tools Bash(gh pr *)'

0 commit comments

Comments
 (0)