Skip to content

Add Claude Code GitHub Workflow #52

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
devondragon merged 2 commits into from
Feb 15, 2026
Merged

Add Claude Code GitHub Workflow #52

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
ea75621
"Update Claude PR Assistant workflow"
devondragon Feb 15, 2026
6686912
"Update Claude Code Review workflow"
devondragon Feb 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
23 changes: 5 additions & 18 deletions .github/workflows/claude-code-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@ name: Claude Code Review

on:
pull_request:
types: [opened, synchronize]
types: [opened, synchronize, ready_for_review, reopened]
Copy link

Copilot AI Feb 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR description states "This PR adds a GitHub Actions workflow that enables Claude Code integration" and mentions that "@claude mentions won't work until after the merge is complete." However, the changes show that Claude workflows already exist in the repository (claude.yml and claude-code-review.yml). This PR appears to be updating existing workflows rather than adding new ones. The description should be updated to accurately reflect that this is an update/refactoring of existing Claude Code workflows, not an initial installation.

Copilot uses AI. Check for mistakes.
# Optional: Only run on specific file changes
# paths:
# - "src/**/*.ts"
Expand Down Expand Up @@ -36,22 +36,9 @@ jobs:
uses: anthropics/claude-code-action@v1
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
prompt: |
REPO: ${{ github.repository }}
PR NUMBER: ${{ github.event.pull_request.number }}

Please review this pull request and provide feedback on:
- Code quality and best practices
- Potential bugs or issues
- Performance considerations
- Security concerns
- Test coverage

Use the repository's CLAUDE.md for guidance on style and conventions. Be constructive and helpful in your feedback.

Use `gh pr comment` with your Bash tool to leave your review as a comment on the PR.

plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
plugins: 'code-review@claude-code-plugins'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
Copy link

Copilot AI Feb 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The removal of the custom prompt that referenced CLAUDE.md and the explicit security-focused review instructions appears to be a significant change. The original prompt provided specific guidance on what to review (code quality, bugs, performance, security, test coverage) and instructed Claude to use the repository's CLAUDE.md for style conventions. The new plugin-based approach may not provide the same level of customization. Consider whether the plugin approach provides equivalent functionality or if some of the custom instructions should be retained.

Suggested change
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
prompt: |
You are performing an in-depth code review for this repository.
Focus on: code quality, correctness/bugs, performance, security (including validation, authentication/authorization, secrets handling, injection risks, and access control), and test coverage.
Follow any repository-specific conventions and guidelines described in CLAUDE.md at the root of this repository, if present.
Then run the following command to analyze the pull request:
/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}

Copilot uses AI. Check for mistakes.
Copy link

Copilot AI Feb 15, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The removal of the claude_args with specific allowed-tools restrictions removes an important security control. The previous configuration explicitly limited Claude to specific gh commands for read-only operations (view, search, list, diff) and only allowed commenting on PRs. The new configuration does not specify any tool restrictions, potentially allowing a broader set of operations. This could have security implications. Consider whether the plugin approach includes equivalent restrictions or if explicit allowed_tools should still be specified.

Suggested change
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'
claude_args: >
--allowed_tools '["gh pr view","gh pr list","gh pr diff","gh pr status","gh pr comment"]'

Copilot uses AI. Check for mistakes.
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://docs.claude.com/en/docs/claude-code/cli-reference for available options
claude_args: '--allowed-tools "Bash(gh issue view:*),Bash(gh search:*),Bash(gh issue list:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh pr list:*)"'
# or https://code.claude.com/docs/en/cli-reference for available options

2 changes: 1 addition & 1 deletion .github/workflows/claude.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -45,6 +45,6 @@ jobs:

# Optional: Add claude_args to customize behavior and configuration
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://docs.claude.com/en/docs/claude-code/cli-reference for available options
# or https://code.claude.com/docs/en/cli-reference for available options
# claude_args: '--allowed-tools Bash(gh pr:*)'

Loading