ci

Author: zbeyens

.github/workflows/claude-code-review.yml

@@ -0,0 +1,71 @@
+name: Claude Code Review
+
+on:
+  pull_request:
+    types: [opened, synchronize, ready_for_review, reopened]
+
+jobs:
+  claude-review:
+    if: github.event.pull_request.user.login == 'zbeyens'
+    runs-on: ubuntu-latest
+    permissions:
+      contents: write
+      pull-requests: write
+      issues: write
+      id-token: write
+      actions: read
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 1
+
+      - name: Setup Bun
+        uses: oven-sh/setup-bun@v2
+        with:
+          bun-version: latest
+
+      - name: Cache bun
+        uses: actions/cache@v4
+        with:
+          path: ~/.bun/install/cache
+          key: ${{ runner.os }}-bun-${{ hashFiles('**/bun.lock') }}
+          restore-keys: |
+            ${{ runner.os }}-bun-
+
+      - name: Install dependencies
+        run: bun install
+
+      - name: Run Claude Code Review
+        uses: anthropics/claude-code-action@v1
+        with:
+          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+
+          prompt: /review
+          track_progress: true
+
+          plugin_marketplaces: |
+            https://github.com/EveryInc/compound-engineering-plugin.git
+            https://github.com/udecode/dotai.git
+          plugins: |
+            compound-engineering@every-marketplace
+            dig@dotai
+            debug@dotai
+            test@dotai
+
+          settings: |
+            {
+              "env": {
+                "BASH_DEFAULT_TIMEOUT_MS": "1800000"
+              },
+              "permissions": {
+                "allow": ["Bash", "Edit", "Glob", "Grep", "Read", "Task", "Write", "WebFetch", "WebSearch"]
+              }
+            }
+          claude_args: |
+            --max-turns 1000
+
+          additional_permissions: |
+            actions: read
+

.github/workflows/claude-review.yml

@@ -22,9 +22,9 @@ jobs:
       )
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      pull-requests: read
-      issues: read
+      contents: write
+      pull-requests: write
+      issues: write
       id-token: write
       actions: read
     steps:
@@ -71,7 +71,7 @@ jobs:
                 "BASH_DEFAULT_TIMEOUT_MS": "1800000"
               },
               "permissions": {
-                "allow": ["Bash"]
+                "allow": ["Bash", "Edit", "Glob", "Grep", "Read", "Task", "Write", "WebFetch", "WebSearch"]
               }
             }
           claude_args: |
@@ -89,9 +89,9 @@ jobs:
       )
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      pull-requests: read
-      issues: read
+      contents: write
+      pull-requests: write
+      issues: write
       id-token: write
       actions: read
     steps:
@@ -140,7 +140,7 @@ jobs:
                 "BASH_DEFAULT_TIMEOUT_MS": "1800000"
               },
               "permissions": {
-                "allow": ["Bash"]
+                "allow": ["Bash", "Edit", "Glob", "Grep", "Read", "Task", "Write", "WebFetch", "WebSearch"]
               }
             }
           claude_args: |