name: Claude Code Review

on:

pull_request:

types: [opened, synchronize, ready_for_review, reopened]

jobs:

claude-review:

# only run when PR is from this repository (fork PRs don't receive secrets)

if: github.event.pull_request.head.repo.full_name == github.repository

concurrency:

group: claude-review-${{ github.repository }}-${{ github.event.pull_request.number }}

cancel-in-progress: true

runs-on: ubuntu-latest

permissions:

contents: read

pull-requests: write

issues: write

id-token: write

steps:

# Action definition is always fetched from main, so PRs that edit it

# don't affect the running version until merged.

- name: Run Claude Code Review

uses: boneskull/gh-stack/.github/actions/claude-code-review@main

with:

claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

repository: ${{ github.repository }}

pr_number: ${{ github.event.pull_request.number }}