Mirrors/super-productivity
1
0
Fork 0
mirror of https://github.com/johannesjo/super-productivity.git synced 2026-01-23 02:36:05 +00:00
Code Issues Projects Releases Wiki Activity

fix(ci): allow external contributors to trigger Claude Code review workflow

Browse source 
Add allowed_non_write_users parameter to bypass actor permission check for PRs from external contributors. This enables automated code reviews for all PRs, including those from forks, while maintaining security through pull_request_target context.
This commit is contained in:
Johannes Millan 2026-01-21 19:23:27 +01:00
parent 4661b19f7a
commit 623971eacd
1 changed files with 3 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

3
.github/workflows/claude-code-review.yml vendored
View file

@ -45,6 +45,9 @@ jobs:
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
github_token: ${{ secrets.GITHUB_TOKEN }}
# Allow all PR authors regardless of repository permissions
# This is safe because pull_request_target runs in the base repo context
allowed_non_write_users: '*'
# Allow common dependency management bots to trigger reviews
allowed_bots: 'dependabot[bot],renovate[bot]'
plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'