Conversation
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
This PR is being reviewed by Cursor Bugbot
Details
You are on the Bugbot Free tier. On this plan, Bugbot will review limited PRs each billing cycle.
To receive Bugbot reviews on all of your PRs, visit the Cursor dashboard to activate Pro and start your 14-day free trial.
| runs-on: ubuntu-latest | ||
| permissions: | ||
| contents: read | ||
| pull-requests: read |
There was a problem hiding this comment.
Missing write permissions prevents posting PR comments
The workflow sets pull-requests: read permission but the prompt instructs Claude to use gh pr comment and claude_args explicitly allows the Bash(gh pr comment:*) tool. The gh pr comment command requires pull-requests: write permission to post comments. With only read access, the comment command will fail with a permission error, making the code review workflow unable to deliver its results.
Additional Locations (1)
| contents: read | ||
| pull-requests: read | ||
| issues: read | ||
| id-token: write |
There was a problem hiding this comment.
Read-only permissions prevent creating comments and branches
The workflow sets only read permissions for contents, pull-requests, and issues. However, the PR description states Claude can create "comments, branches, and commits." These operations require write permissions (contents: write for branches/commits, pull-requests: write for PR comments, issues: write for issue comments). Without write permissions, Claude will be unable to respond or take action when mentioned.
| pull_request_review_comment: | ||
| types: [created] | ||
| issues: | ||
| types: [opened, assigned] |
There was a problem hiding this comment.
Assigned event trigger causes duplicate Claude invocations
The issues trigger includes both opened and assigned events, but the if condition only checks if @claude exists in the issue body or title. When an issue containing @claude is later assigned to someone, the workflow re-triggers and the condition passes again since the issue body hasn't changed. This causes Claude to process and potentially respond to the same issue multiple times, leading to duplicate comments and unnecessary API costs.
Additional Locations (1)
1 participant
🤖 Installing Claude Code GitHub App
This PR adds a GitHub Actions workflow that enables Claude Code integration in our repository.
What is Claude Code?
Claude Code is an AI coding agent that can help with:
How it works
Once this PR is merged, we'll be able to interact with Claude by mentioning @claude in a pull request or issue comment.
Once the workflow is triggered, Claude will analyze the comment and surrounding context, and execute on the request in a GitHub action.
Important Notes
Security
There's more information in the Claude Code action repo.
After merging this PR, let's try mentioning @claude in a comment on any PR to get started!
Note
Introduces Claude Code automation via GitHub Actions.
claude-code-review.ymlto auto-run Claude code reviews on PR open/sync with a focused review prompt and limitedghtoolsclaude.ymlto trigger Claude when@claudeis mentioned in issue/PR comments or reviews, with minimal read permissions (includingactions: read)Written by Cursor Bugbot for commit 5ff2173. This will update automatically on new commits. Configure here.