mirror of
https://github.com/xtr-dev/payload-billing.git
synced 2025-12-10 02:43:24 +00:00
Bas van den Aakster
534b0e440f
- Add multi-level permission checking for issue implementation workflow - Support multiple permission strategies: privileged users, admins only, combined, org-based - Add permission validation with detailed error messages - Restrict code review workflow to privileged users and repository members - Create permission configuration file (.github/claude-config.json) - Add comprehensive permission documentation Permission strategies available: - Privileged users only (most restrictive) - Repository admins only - Admins OR privileged users (default) - Organization members with write access - Everyone with write access (least restrictive) Current configuration: - Issue implementation: admins OR privileged users (bastiaan, xtr-dev-team) - Code reviews: privileged users and repository members only 🤖 Generated with [Claude Code](https://claude.ai/code) Co-Authored-By: Claude <noreply@anthropic.com>
91 lines
3.5 KiB
YAML
91 lines
3.5 KiB
YAML
name: Claude Code Review
|
|
|
|
on:
|
|
pull_request:
|
|
types: [opened, synchronize]
|
|
# Optional: Only run on specific file changes
|
|
# paths:
|
|
# - "src/**/*.ts"
|
|
# - "src/**/*.tsx"
|
|
# - "src/**/*.js"
|
|
# - "src/**/*.jsx"
|
|
|
|
jobs:
|
|
claude-review:
|
|
# Permission filter: Only allow specific users or admins to trigger reviews
|
|
if: |
|
|
contains(fromJSON('["bastiaan", "xtr-dev-team"]'), github.event.pull_request.user.login) ||
|
|
github.event.pull_request.author_association == 'OWNER' ||
|
|
github.event.pull_request.author_association == 'MEMBER'
|
|
|
|
# Alternative filters (comment out the above and use one of these):
|
|
# Only for external contributors:
|
|
# if: github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
|
|
|
|
# Only for specific users:
|
|
# if: contains(fromJSON('["username1", "username2"]'), github.event.pull_request.user.login)
|
|
|
|
# Only for non-admins (let admins skip review):
|
|
# if: |
|
|
# github.event.pull_request.author_association != 'OWNER' &&
|
|
# github.event.pull_request.author_association != 'MEMBER'
|
|
|
|
runs-on: ubuntu-latest
|
|
permissions:
|
|
contents: read
|
|
pull-requests: read
|
|
issues: read
|
|
id-token: write
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v4
|
|
with:
|
|
fetch-depth: 1
|
|
|
|
- name: Run Claude Code Review
|
|
id: claude-review
|
|
uses: anthropics/claude-code-action@beta
|
|
with:
|
|
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
|
|
|
|
# Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4.1)
|
|
# model: "claude-opus-4-1-20250805"
|
|
|
|
# Direct prompt for automated review (no @claude mention needed)
|
|
direct_prompt: |
|
|
Please review this pull request and provide feedback on:
|
|
- Code quality and best practices
|
|
- Potential bugs or issues
|
|
- Performance considerations
|
|
- Security concerns
|
|
- Test coverage
|
|
|
|
Be constructive and helpful in your feedback.
|
|
|
|
# Optional: Use sticky comments to make Claude reuse the same comment on subsequent pushes to the same PR
|
|
# use_sticky_comment: true
|
|
|
|
# Optional: Customize review based on file types
|
|
# direct_prompt: |
|
|
# Review this PR focusing on:
|
|
# - For TypeScript files: Type safety and proper interface usage
|
|
# - For API endpoints: Security, input validation, and error handling
|
|
# - For React components: Performance, accessibility, and best practices
|
|
# - For tests: Coverage, edge cases, and test quality
|
|
|
|
# Optional: Different prompts for different authors
|
|
# direct_prompt: |
|
|
# ${{ github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR' &&
|
|
# 'Welcome! Please review this PR from a first-time contributor. Be encouraging and provide detailed explanations for any suggestions.' ||
|
|
# 'Please provide a thorough code review focusing on our coding standards and best practices.' }}
|
|
|
|
# Optional: Add specific tools for running tests or linting
|
|
# allowed_tools: "Bash(npm run test),Bash(npm run lint),Bash(npm run typecheck)"
|
|
|
|
# Optional: Skip review for certain conditions
|
|
# if: |
|
|
# !contains(github.event.pull_request.title, '[skip-review]') &&
|
|
# !contains(github.event.pull_request.title, '[WIP]')
|
|
|