Nicholai 27269be7bf
fix(ci): grant write permissions to Claude GitHub Action (#74)
Update workflow permissions to allow Claude to create branches,
push commits, and create PRs when tagged in issues or comments.

- contents: write - create branches and push commits
- pull-requests: write - create PRs and comments
- issues: write - update issue comments

Co-authored-by: Nicholai <nicholaivogelfilms@gmail.com>
2026-02-12 16:22:53 -07:00

54 lines
2.0 KiB
YAML

name: Claude Code
on:
issue_comment:
types: [created]
pull_request_review_comment:
types: [created]
issues:
types: [opened, assigned]
pull_request_review:
types: [submitted]
jobs:
claude:
if: |
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
runs-on: ubuntu-latest
permissions:
contents: write # Create branches and push commits
pull-requests: write # Create PRs and comments
issues: write # Update issue comments
id-token: write # OIDC authentication
actions: read # Read CI results
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 1
- name: Run Claude Code
id: claude
uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
# Permissions passed to Claude for repository operations
additional_permissions: |
contents: write
pull-requests: write
issues: write
actions: read
# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
# prompt: 'Update the pull request description to include a summary of changes.'
# Optional: Add claude_args to customize behavior and configuration
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://code.claude.com/docs/en/cli-reference for available options
# claude_args: '--allowed-tools Bash(gh pr:*)'