ci: on-demand PR review via /review comment #11
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Claude PR review | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, reopened] | |
| # One review per PR — a new push cancels the in-flight run instead of stacking. | |
| concurrency: | |
| group: claude-review-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| id-token: write # claude-code-action fetches an OIDC token for auth | |
| jobs: | |
| review: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| with: | |
| fetch-depth: 0 # review skill diffs against the merge-base | |
| - uses: anthropics/claude-code-action@v1 | |
| with: | |
| claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} | |
| allowed_bots: claude-agent-ahrzb # agents push feature branches as this App bot | |
| plugin_marketplaces: https://github.com/anthropics/claude-plugins-official.git | |
| plugins: superpowers@claude-plugins-official | |
| claude_args: --model claude-sonnet-5 --max-turns 20 | |
| track_progress: true # post the review to the PR as a comment | |
| use_sticky_comment: true # reuse one comment per PR instead of one per push | |
| prompt: | | |
| Review this pull request. | |
| Use the superpowers:requesting-code-review skill and follow it exactly. | |
| Diff the PR branch against ${{ github.event.pull_request.base.ref }}. | |
| Report only what you verified in the diff. No speculative findings, no | |
| style nits. If nothing needs changing, say so in one line. |