From 516750931d9c20c110c025b1e20458792304f1fa Mon Sep 17 00:00:00 2001 From: Justin Gordon Date: Tue, 17 Feb 2026 13:24:05 -1000 Subject: [PATCH 1/3] Remove broken Claude Code Review workflow MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The plugin-based review setup is broken — the plugin tries to call gh api via the Bash tool, which the action sandbox blocks by default. Removing in favor of the working default claude.yml (@claude mentions). Co-Authored-By: Claude Opus 4.6 --- .github/workflows/claude-code-review.yml | 44 ------------------------ 1 file changed, 44 deletions(-) delete mode 100644 .github/workflows/claude-code-review.yml diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml deleted file mode 100644 index b5e8cfd4..00000000 --- a/.github/workflows/claude-code-review.yml +++ /dev/null @@ -1,44 +0,0 @@ -name: Claude Code Review - -on: - pull_request: - types: [opened, synchronize, ready_for_review, reopened] - # Optional: Only run on specific file changes - # paths: - # - "src/**/*.ts" - # - "src/**/*.tsx" - # - "src/**/*.js" - # - "src/**/*.jsx" - -jobs: - claude-review: - # Optional: Filter by PR author - # if: | - # github.event.pull_request.user.login == 'external-contributor' || - # github.event.pull_request.user.login == 'new-developer' || - # github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR' - - runs-on: ubuntu-latest - permissions: - contents: read - pull-requests: read - issues: read - id-token: write - - steps: - - name: Checkout repository - uses: actions/checkout@v4 - with: - fetch-depth: 1 - - - name: Run Claude Code Review - id: claude-review - uses: anthropics/claude-code-action@v1 - with: - claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} - plugin_marketplaces: 'https://github.com/anthropics/claude-code.git' - plugins: 'code-review@claude-code-plugins' - prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}' - # See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md - # or https://code.claude.com/docs/en/cli-reference for available options - From 17e3628946949b6167d1cd2bb656b488f8613e7f Mon Sep 17 00:00:00 2001 From: Justin Gordon Date: Tue, 17 Feb 2026 13:32:53 -1000 Subject: [PATCH 2/3] Fix Claude Code Review workflow: use built-in review instead of broken plugin Replace the plugin-based review (which fails because the sandbox blocks Bash tool access) with the built-in review_triggered_on and use_sticky_comment options. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/claude-code-review.yml | 28 ++++++++++++++++++++++++ 1 file changed, 28 insertions(+) create mode 100644 .github/workflows/claude-code-review.yml diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml new file mode 100644 index 00000000..51f858a2 --- /dev/null +++ b/.github/workflows/claude-code-review.yml @@ -0,0 +1,28 @@ +name: Claude Code Review + +on: + pull_request: + types: [opened, synchronize, ready_for_review, reopened] + +jobs: + claude-review: + runs-on: ubuntu-latest + permissions: + contents: read + pull-requests: write + issues: write + id-token: write + + steps: + - name: Checkout repository + uses: actions/checkout@v6 + with: + fetch-depth: 1 + + - name: Run Claude Code Review + id: claude-review + uses: anthropics/claude-code-action@v1 + with: + claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + review_triggered_on: pr + use_sticky_comment: true From b3f7c384f98d5c02953dcebe89787a007f524495 Mon Sep 17 00:00:00 2001 From: Justin Gordon Date: Tue, 17 Feb 2026 13:35:55 -1000 Subject: [PATCH 3/3] Fix: remove invalid review_triggered_on input The action auto-detects review mode from the pull_request trigger. Only use_sticky_comment and prompt are needed. Co-Authored-By: Claude Opus 4.6 --- .github/workflows/claude-code-review.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 51f858a2..bfe0af64 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -24,5 +24,6 @@ jobs: uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} - review_triggered_on: pr use_sticky_comment: true + prompt: | + Review this PR for correctness, security issues, and potential improvements.