dependabot[bot]
599736c9c1
Bumps the actions group with 4 updates: [pnpm/action-setup](https://github.com/pnpm/action-setup), [aws-actions/configure-aws-credentials](https://github.com/aws-actions/configure-aws-credentials), [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) and [zizmorcore/zizmor-action](https://github.com/zizmorcore/zizmor-action). Updates `pnpm/action-setup` from 6.0.9 to 6.0.10 - [Release notes](https://github.com/pnpm/action-setup/releases) - [Commits](https://github.com/pnpm/action-setup/compare/v6.0.9...0977fd99725f1db4007ccb2928dbb4e90d06cc86) Updates `aws-actions/configure-aws-credentials` from 6.2.3 to 6.2.4 - [Release notes](https://github.com/aws-actions/configure-aws-credentials/releases) - [Changelog](https://github.com/aws-actions/configure-aws-credentials/blob/main/CHANGELOG.md) - [Commits](https://github.com/aws-actions/configure-aws-credentials/compare/e6de054238d6b7531b4efff3b6587d9aade6a06c...cbe3b392738ccf3f987d68400dafcf4b0624a56c) Updates `anthropics/claude-code-action` from 1.0.202 to 1.0.211 - [Release notes](https://github.com/anthropics/claude-code-action/releases) - [Commits](https://github.com/anthropics/claude-code-action/compare/e5ad3c7725bc2459721893f88879fef9dbcf97b0...833fb0f8c9f6686b33d963a8bae0a94f4936ab2a) Updates `zizmorcore/zizmor-action` from 0.6.2 to 0.6.3 - [Release notes](https://github.com/zizmorcore/zizmor-action/releases) - [Commits](https://github.com/zizmorcore/zizmor-action/compare/3dc1ecc9bcb9e94e9b2c709687979e1298497054...70fb788f84895a7701f5643d103d587e460b5c99) --- updated-dependencies: - dependency-name: pnpm/action-setup dependency-version: 6.0.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: aws-actions/configure-aws-credentials dependency-version: 6.2.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: anthropics/claude-code-action dependency-version: 1.0.211 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions - dependency-name: zizmorcore/zizmor-action dependency-version: 0.6.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: actions ... Signed-off-by: dependabot[bot] <support@github.com>
67 lines
2.5 KiB
YAML
67 lines
2.5 KiB
YAML
name: claude-review
|
|
|
|
# Automatic Claude review on PR creation/update, via Agent Gateway.
|
|
# Self-contained: this intentionally uses upstream
|
|
# claude-code-action defaults rather than the org reusable workflows in
|
|
# bluesky-social/.github (which a public repo cannot call, and whose
|
|
# customizations added no value over upstream).
|
|
#
|
|
# Review guidance lives in .github/claude-review-prompt.md.
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize, reopened, ready_for_review]
|
|
|
|
permissions:
|
|
contents: read
|
|
pull-requests: write
|
|
actions: read
|
|
# Required for claude-code-action's GitHub App token exchange.
|
|
id-token: write
|
|
|
|
jobs:
|
|
review:
|
|
# Internal PRs only. This repo is public: fork PRs are the bulk of
|
|
# community traffic and MUST NOT trigger reviews (no gateway spend on
|
|
# unvetted code). Branch PRs can only be
|
|
# created by people with write access, i.e. org members.
|
|
# Bot-authored PRs (dependabot, changesets) are also skipped.
|
|
if: >
|
|
github.event.pull_request.draft == false &&
|
|
github.event.pull_request.head.repo.full_name == github.repository &&
|
|
github.event.pull_request.user.type != 'Bot'
|
|
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 20
|
|
|
|
concurrency:
|
|
group: claude-review-${{ github.repository }}-${{ github.event.pull_request.number }}
|
|
cancel-in-progress: true
|
|
|
|
steps:
|
|
- name: ⬇️ Checkout repository
|
|
uses: actions/checkout@3d3c42e5aac5ba805825da76410c181273ba90b1 # v7.0.1
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: 🤖 Claude review
|
|
uses: anthropics/claude-code-action@833fb0f8c9f6686b33d963a8bae0a94f4936ab2a # v1.0.211
|
|
env:
|
|
ANTHROPIC_BASE_URL: https://agentgateway.k1.prod.bsky.dev
|
|
with:
|
|
# Agent Gateway service keys use Authorization: Bearer, the wire
|
|
# shape emitted by the action's OAuth-token input.
|
|
claude_code_oauth_token: ${{ secrets.AGENT_GATEWAY_CLAUDE_GH_REVIEW_KEY }}
|
|
additional_permissions: |
|
|
actions: read
|
|
track_progress: true
|
|
claude_args: |
|
|
--model claude-opus-4-8:api
|
|
--allowedTools "mcp__github_inline_comment__create_inline_comment,mcp__github_ci__get_ci_status,mcp__github_ci__download_job_log,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
|
|
prompt: |
|
|
REPO: ${{ github.repository }}
|
|
PR NUMBER: ${{ github.event.pull_request.number }}
|
|
|
|
Read .github/claude-review-prompt.md in the checked-out repo
|
|
and review this pull request following its guidance.
|