Fix claude-code-review.yml startup_failure: grant actions: read, pin @v2 #30

	# Thin caller for the central Morrison-Lab/gha reusable Claude code-review
	# workflow. Requires the CLAUDE_CODE_OAUTH_TOKEN repository secret (passed via
	# `secrets: inherit`). The workflow_dispatch path lets claude.yml re-dispatch a
	# review after an @claude run pushes commits — keep this file named
	# claude-code-review.yml so the dispatch resolves.
	name: Claude Code Review

	on:
	pull_request:
	types: [opened, synchronize, ready_for_review, reopened]
	workflow_dispatch:
	inputs:
	pr_number:
	description: 'Pull request number to review'
	required: true
	type: string

	jobs:
	review:
	permissions:
	contents: read
	pull-requests: write
	issues: write
	id-token: write
	# Lets the reviewer read CI status (github_ci MCP server); without
	# this the callee's claude-review job can't get the `actions: read` it
	# requests, and the run fails at startup with "startup_failure" before
	# any job is created (#43).
	actions: read
	uses: Morrison-Lab/gha/.github/workflows/claude-code-review.yml@v2
	secrets: inherit
	with:
	# Wires the workflow_dispatch input through so claude.yml can re-dispatch
	# a review on Claude's commits; empty (and ignored) for pull_request runs.
	pr-number: ${{ inputs.pr_number }}
	prompt-addendum: \|
	This is a Quarto book (prose, not an R package). Focus the review on
	the changed .qmd chapters: clear scientific writing prose, correct
	Quarto/Markdown syntax, working cross-references and citations, and the
	SERG lab manual's .qmd conventions (backticked `pkg::fn()`, Markdown
	links rather than raw HTML, US English spelling).

Navigation Menu