diff options
| author | hathach <[email protected]> | 2026-03-05 20:59:26 +0700 |
|---|---|---|
| committer | hathach <[email protected]> | 2026-03-05 20:59:26 +0700 |
| commit | ce8a77083dc00423b2c1a4c7657aa7290684dea6 (patch) | |
| tree | 73eac10fd781ae3b633bd5d72893b0582c3c45f0 | |
| parent | 0c7a385cf873b9cbf93344187c033c176c37f7e2 (diff) | |
ci: fix claude-code-review for fork PRs
Switch pull_request to pull_request_target so secrets and OIDC tokens
are available when reviewing PRs from forks. Also add pull-requests: write
permission so the action can post review comments.
Co-Authored-By: Claude Sonnet 4.6 <[email protected]>
| -rw-r--r-- | .github/workflows/claude-code-review.yml | 16 |
1 files changed, 2 insertions, 14 deletions
diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 25f4ad18c..5ba2fe900 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -1,27 +1,15 @@ name: Claude Code Review on: - pull_request: + pull_request_target: types: [opened, synchronize, ready_for_review, reopened] - # Optional: Only run on specific file changes - # paths: - # - "src/**/*.ts" - # - "src/**/*.tsx" - # - "src/**/*.js" - # - "src/**/*.jsx" jobs: claude-review: - # Optional: Filter by PR author - # if: | - # github.event.pull_request.user.login == 'external-contributor' || - # github.event.pull_request.user.login == 'new-developer' || - # github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR' - runs-on: ubuntu-latest permissions: contents: read - pull-requests: read + pull-requests: write issues: read id-token: write |