Skip to content

Upgrade Claude Code review to Opus 4.7 with scoped tool permissions#733

Merged
syed-ahsan-ishtiaque merged 4 commits intomainfrom
upgrade-claude-review-opus-47
Apr 23, 2026
Merged

Upgrade Claude Code review to Opus 4.7 with scoped tool permissions#733
syed-ahsan-ishtiaque merged 4 commits intomainfrom
upgrade-claude-review-opus-47

Conversation

@syed-ahsan-ishtiaque
Copy link
Copy Markdown
Contributor

Summary

  • Upgrades the Claude Code review model from Opus 4.6 to Opus 4.7
  • Scopes allowedTools patterns to the current PR number instead of wildcards. This prevents Claude from accidentally posting review comments on other PRs (e.g. previously merged PRs).
  • Adds an explicit prompt guardrail telling Claude to only interact with the current PR

Context

On aws-otel-js-instrumentation, a review run for PR #406 accidentally posted 10 review comments on the already-merged PR #391. The cause was the wildcard pattern in allowedTools (repos/*/pulls/*) allowing Claude to post to any PR.

Test plan

  • Verify Claude still posts review comments on new PRs
  • Verify Claude cannot post to other PRs (by checking only current PR gets comments)

@syed-ahsan-ishtiaque syed-ahsan-ishtiaque requested a review from a team as a code owner April 23, 2026 19:44
@syed-ahsan-ishtiaque syed-ahsan-ishtiaque added the skip changelog doesn't need a CHANGELOG entry label Apr 23, 2026
liustve
liustve previously approved these changes Apr 23, 2026
@syed-ahsan-ishtiaque syed-ahsan-ishtiaque merged commit 6da20ba into main Apr 23, 2026
18 checks passed
@syed-ahsan-ishtiaque syed-ahsan-ishtiaque deleted the upgrade-claude-review-opus-47 branch April 23, 2026 21:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

skip changelog doesn't need a CHANGELOG entry

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants