Skip to content
Merged
Changes from 1 commit
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
39 changes: 39 additions & 0 deletions .github/workflows/cca-review.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,39 @@
name: Claude Auto Review with Tracking
on:
pull_request:
types: [opened, synchronize, ready_for_review, reopened]

jobs:
review:
runs-on: ubuntu-latest
permissions:
contents: read
pull-requests: write
id-token: write
environment:
name: integration
steps:
- uses: actions/checkout@v5
with:
fetch-depth: 1

- uses: anthropics/claude-code-action@v1
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
track_progress: true
Comment on lines +23 to +26

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Guard Claude review job when secrets are unavailable

This workflow executes on every pull_request, but it unconditionally passes secrets.ANTHROPIC_API_KEY into anthropics/claude-code-action@v1. For PRs that originate from forks (the default case for external contributors), GitHub does not expose repository secrets to the workflow, so this step will fail at startup and mark the whole check as failed even though the PR author cannot fix it. Consider skipping the job for forked PRs or conditionally running the step only when the secret is set, otherwise community submissions will always see a broken required check.

Useful? React with 👍 / 👎.

prompt: |
REPO: ${{ github.repository }}
PR NUMBER: ${{ github.event.pull_request.number }}

Please review this pull request with a focus on:
- Code quality and best practices
- Potential bugs or issues
- Security implications
- Performance considerations

Please take @.ai/project-prd, @.ai/tech-stack and other applicable context documents into account.

Provide detailed feedback using inline comments for specific issues.

claude_args: |
--allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
Loading