Add Claude Code GitHub Action

[don-petry]

Summary

• Adds Claude Code GitHub Action workflow for automated PR reviews
• Triggers on PR open/sync and when @claude is mentioned in comments
• Requires ANTHROPIC_API_KEY secret to be configured in repo settings

Setup Required

1. Add ANTHROPIC_API_KEY as a repository secret (Settings → Secrets and variables → Actions)

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Added an automated workflow that runs on pull requests and can be manually triggered via comment commands from repository collaborators.
  • Workflow runs on hosted Linux runners with a 60-minute timeout and limited repository permissions to read contents and post PR/issue updates, improving automated review and feedback availability.

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 13 minutes and 12 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 13 minutes and 12 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: a8c17c5c-693a-421f-b460-abeb9c665ca1

📥 Commits

Reviewing files that changed from the base of the PR and between 061bd8c and ee8fd33.

📒 Files selected for processing (1)

• .github/workflows/claude.yml

📝 Walkthrough

Walkthrough

Added a GitHub Actions workflow .github/workflows/claude.yml that runs the anthropics/claude-code-action@v1 on pull request events and on comments containing @claude from repo members/collaborators, using the ANTHROPIC_API_KEY secret with limited permissions and a 60-minute timeout.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow .github/workflows/claude.yml	New workflow "Claude Code" added. Triggers on PR events (opened, reopened, synchronize) and comment events when body contains @claude and commenter is OWNER/MEMBER/COLLABORATOR. Runs anthropics/claude-code-action@v1 on ubuntu-latest, timeout 60m, repo read and PR/issue write permissions, uses ANTHROPIC_API_KEY secret.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Add Claude Code GitHub Action' is concise, clear, and directly describes the main change: adding a GitHub Actions workflow for Claude Code integration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch add-claude-code-action

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 2

🧹 Nitpick comments (1)

.github/workflows/claude.yml (1)

4-5: Avoid duplicate auto-reviews with existing CodeRabbit automation.

Given .coderabbit.yaml (Line 4-9) already enables auto review on main, this PR-triggered Claude run will produce duplicate bot feedback on every PR. Consider making Claude manual (@claude only) or adding additional gating (label/opt-in).

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/claude.yml around lines 4 - 5, The claude.yml workflow is
currently triggered on pull_request (pull_request: types: [opened, reopened,
synchronize]) which duplicates .coderabbit.yaml's auto-review; change claude.yml
to avoid automatic PR runs by replacing the pull_request trigger with a manual
trigger (workflow_dispatch) and/or a comment trigger gated to an `@claude` command
(issue_comment with a conditional checking for the `@claude` phrase) or add a
label opt-in gate (keep pull_request but add an if: that checks for a specific
label). Update the workflow triggers and any conditional expressions so
claude.yml only runs when explicitly requested (manual dispatch, `@claude`
comment, or opt-in label) to prevent duplicate bot feedback with
.coderabbit.yaml.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @.github/workflows/claude.yml:
- Around line 11-13: The workflow currently allows any commenter to trigger the
run via contains(github.event.comment.body, '@claude'); tighten the if condition
by also checking the commenter's author association using
github.event.comment.author_association and only permitting trusted associations
(e.g., OWNER, MEMBER, COLLABORATOR) before allowing the secret-backed run;
update the conditional that uses contains(github.event.comment.body, '@claude')
(and the other identical occurrence) to require that
github.event.comment.author_association is one of the allowed values in addition
to the body check.
- Around line 6-13: The workflow's conditional allows the claude job to run for
any issue_comment, which includes regular issues; update the job-level if
expression (the one guarding the claude job) to require that an issue_comment
event is on a pull request by adding a check for github.event.issue.pull_request
(e.g., && github.event.issue.pull_request != null or &&
contains(toJSON(github.event.issue), 'pull_request')), so the second clause
becomes: (github.event_name == 'issue_comment' &&
github.event.issue.pull_request && contains(github.event.comment.body,
'@claude')) ensuring `@claude` on non-PR issues won't trigger the claude job.

---

Nitpick comments:
In @.github/workflows/claude.yml:
- Around line 4-5: The claude.yml workflow is currently triggered on
pull_request (pull_request: types: [opened, reopened, synchronize]) which
duplicates .coderabbit.yaml's auto-review; change claude.yml to avoid automatic
PR runs by replacing the pull_request trigger with a manual trigger
(workflow_dispatch) and/or a comment trigger gated to an `@claude` command
(issue_comment with a conditional checking for the `@claude` phrase) or add a
label opt-in gate (keep pull_request but add an if: that checks for a specific
label). Update the workflow triggers and any conditional expressions so
claude.yml only runs when explicitly requested (manual dispatch, `@claude`
comment, or opt-in label) to prevent duplicate bot feedback with
.coderabbit.yaml.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 650b1660-8a68-40cc-a167-27586048ed68

📥 Commits

Reviewing files that changed from the base of the PR and between 1ddbc95 and a7c54ce.

📒 Files selected for processing (1)

• .github/workflows/claude.yml

[Copilot]

Pull request overview

Adds a GitHub Actions workflow to run the Claude Code action for automated PR reviews, triggered on PR activity and “@claude” mentions.

Changes:

• Introduces a new .github/workflows/claude.yml workflow.
• Runs on pull_request open/reopen/synchronize and issue_comment.created, gated by an if: condition.
• Passes ANTHROPIC_API_KEY from repo secrets into anthropics/claude-code-action@v1.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud