ci: switch Claude workflows to OAuth token auth (LAC-3035) - #482
Merged
Conversation
- claude-code-review.yml: anthropics/claude-code-action beta -> v1, ANTHROPIC_API_KEY (out of credits) -> CLAUDE_CODE_OAUTH_TOKEN - claude.yml: replace unmaintained grll/claude-code-action fork with official v1 action; drop expired access/refresh/expires token secrets Requires repo secret CLAUDE_CODE_OAUTH_TOKEN from 'claude setup-token'.
|
Caution The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased. |
lacymorrow
added a commit
that referenced
this pull request
Jul 23, 2026
…et (LAC-3035) (#484) The claude-code-action fails env validation on every PR because the CLAUDE_CODE_OAUTH_TOKEN repo secret was never created after the OAuth migration (#482). Guard the steps so the jobs skip with a notice annotation instead of failing, until the secret exists. Co-authored-by: Paperclip <noreply@paperclip.ing>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Problem
The
claude-reviewaction fails on every PR with "Credit balance is too low" — theANTHROPIC_API_KEYused by.github/workflows/claude-code-review.ymlhas no API credits (seen on #478, runs 30026314984 / 30026364023). With Gemini Code Assist sunset, juno currently has zero automated AI review.Separately,
claude.yml(the@claudemention assistant) uses the unmaintainedgrll/claude-code-actionfork withCLAUDE_ACCESS_TOKEN/CLAUDE_REFRESH_TOKEN/CLAUDE_EXPIRES_ATsecrets last updated Aug 2025 — long expired, so it is silently broken too.Fix
Move both workflows to the official
anthropics/claude-code-action@v1authenticated withclaude_code_oauth_token(Claude Max subscription, no per-token billing):@beta→@v1,anthropic_api_key→claude_code_oauth_token, deprecateddirect_prompt→prompt, allowlistgh prcomment/diff/view tools + inline comments.grllfork → official@v1; one static secret replaces the three rotating OAuth secrets.Required before this works
A repo secret must be added (only Lacy can mint it):
Until the secret exists, the review job will fail fast with a missing-token error — no worse than today's credit-balance failure.
Closes LAC-3035.