Add Claude Code GitHub Workflow

[megabyte0x]

🤖 Installing Claude Code GitHub App

This PR adds a GitHub Actions workflow that enables Claude Code integration in our repository.

What is Claude Code?

Claude Code is an AI coding agent that can help with:

• Bug fixes and improvements
• Documentation updates
• Implementing new features
• Code reviews and suggestions
• Writing tests
• And more!

How it works

Once this PR is merged, we'll be able to interact with Claude by mentioning @claude in a pull request or issue comment.
Once the workflow is triggered, Claude will analyze the comment and surrounding context, and execute on the request in a GitHub action.

Important Notes

• This workflow won't take effect until this PR is merged
• @claude mentions won't work until after the merge is complete
• The workflow runs automatically whenever Claude is mentioned in PR or issue comments
• Claude gets access to the entire PR or issue context including files, diffs, and previous comments

Security

• Our Anthropic API key is securely stored as a GitHub Actions secret
• Only users with write access to the repository can trigger the workflow
• All Claude runs are stored in the GitHub Actions run history
• Claude's default tools are limited to reading/writing files and interacting with our repo by creating comments, branches, and commits.
• We can add more allowed tools by adding them to the workflow file like:

allowed_tools: Bash(npm install),Bash(npm run build),Bash(npm run lint),Bash(npm run test)

There's more information in the Claude Code action repo.

After merging this PR, let's try mentioning @claude in a comment on any PR to get started!

---

[devin-ai-integration]

Devin Review found 1 potential issue.

View issue and 2 additional flags in Devin Review.

[devin-ai-integration]

🔴 Missing pull-requests: write permission prevents Claude from commenting on PRs

The workflow instructs Claude to leave review comments using gh pr comment (line 52) and includes Bash(gh pr comment:*) in the allowed tools (line 56), but the workflow only has pull-requests: read permission (line 24).

Click to expand

How the bug is triggered

1. A pull request is opened or synchronized
2. The workflow runs and Claude performs the code review
3. Claude attempts to execute gh pr comment to post the review
4. The GitHub API rejects the request because the workflow token only has read permission on pull requests

Actual vs Expected

Actual: The gh pr comment command fails with a permission error, and the review is never posted to the PR.

Expected: Claude successfully posts the code review as a comment on the PR.

Impact

The workflow's primary purpose (posting code reviews as PR comments) will fail every time. The code review analysis may complete successfully, but the results will never be visible to users.

Fix

Change line 24 from:

pull-requests: read

to:

pull-requests: write

---

Was this helpful? React with 👍 or 👎 to provide feedback.