jake/compassmock
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix(ci): grant write permissions to Claude GitHub Action (#74)

Browse Source 
Update workflow permissions to allow Claude to create branches,
push commits, and create PRs when tagged in issues or comments.

- contents: write - create branches and push commits
- pull-requests: write - create PRs and comments
- issues: write - update issue comments

Co-authored-by: Nicholai <nicholaivogelfilms@gmail.com>
This commit is contained in:
Nicholai 2026-02-12 16:22:53 -07:00 committed by GitHub
parent 528e5cd55c
commit 27269be7bf
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
.github/workflows/claude.yml vendored
View File

@ -19,11 +19,11 @@ jobs:
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude'))) (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
runs-on: ubuntu-latest runs-on: ubuntu-latest
permissions: permissions:
contents: read contents: write # Create branches and push commits
pull-requests: read pull-requests: write # Create PRs and comments
issues: read issues: write # Update issue comments
id-token: write id-token: write # OIDC authentication
actions: read # Required for Claude to read CI results on PRs actions: read # Read CI results
steps: steps:
- name: Checkout repository - name: Checkout repository
uses: actions/checkout@v4 uses: actions/checkout@v4
@ -36,8 +36,11 @@ jobs:
with: with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
# This is an optional setting that allows Claude to read CI results on PRs # Permissions passed to Claude for repository operations
additional_permissions: | additional_permissions: |
contents: write
pull-requests: write
issues: write
actions: read actions: read
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it. # Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.