Conversation
There was a problem hiding this comment.
π‘ Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 57f5e98534
βΉοΈ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with π.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| contents: read | ||
| pull-requests: read | ||
| issues: read |
There was a problem hiding this comment.
Use write permissions for mention-driven Claude workflow
In .github/workflows/claude.yml, the job is explicitly triggered by @claude mentions but the token is restricted to contents/pull-requests/issues: read; that scope cannot create the reply comments (or any follow-up branch/commit actions), so runs can execute and then fail with permission errors when trying to publish results back to the PR/issue thread.
Useful? React with πΒ / π.
| contents: read | ||
| pull-requests: read | ||
| issues: read |
There was a problem hiding this comment.
Allow PR write access for automated code review output
The review workflow invokes /code-review:code-review on every PR, but pull-requests (and issues) permissions are read-only, which prevents posting review comments/status back to the pull request; as a result Claude can analyze the diff but cannot deliver review feedback where contributors expect it.
Useful? React with πΒ / π.
| pull_request: | ||
| types: [opened, synchronize, ready_for_review, reopened] |
There was a problem hiding this comment.
Guard code-review job from fork PRs without secrets
This workflow runs on pull_request events while relying on ${{ secrets.ANTHROPIC_API_KEY }}; for fork-origin PRs, GitHub does not provide repository secrets to pull_request workflows, so the action receives no API key and the review job fails for external contributors unless you gate execution on secret presence or switch to a safe pull_request_target design.
Useful? React with πΒ / π.
Codecov Reportβ
All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #792 +/- ##
==========================================
- Coverage 11.47% 11.34% -0.13%
==========================================
Files 36 36
Lines 3093 3093
==========================================
- Hits 355 351 -4
- Misses 2694 2696 +2
- Partials 44 46 +2 β View full report in Codecov by Sentry. π New features to boost your workflow:
|
- Set pull-requests and issues to write in claude.yml so Claude can post reply comments back to PR/issue threads - Set pull-requests and issues to write in claude-code-review.yml so review feedback can be posted to PRs - Switch claude-code-review.yml trigger from pull_request to pull_request_target so secrets are available for fork PRs Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
π€ Installing Claude Code GitHub App
This PR adds a GitHub Actions workflow that enables Claude Code integration in our repository.
What is Claude Code?
Claude Code is an AI coding agent that can help with:
How it works
Once this PR is merged, we'll be able to interact with Claude by mentioning @claude in a pull request or issue comment.
Once the workflow is triggered, Claude will analyze the comment and surrounding context, and execute on the request in a GitHub action.
Important Notes
Security
There's more information in the Claude Code action repo.
After merging this PR, let's try mentioning @claude in a comment on any PR to get started!