Walkthrough

Adds a GitHub Actions workflow "Claude Auto Review" that runs on pull_request (opened, synchronize). The job runs on ubuntu-latest, checks out the repo, sets up Node.js v20, installs claude-code globally, writes a prompt file containing repo and PR context, and runs claude-code in auto mode with a restricted toolset. The workflow uses GH_TOKEN and Anthropic credentials from secrets and invokes GitHub CLI (gh pr) for posting review comments.

Sequence Diagram

sequenceDiagram
    participant GHA as GitHub Actions
    participant Runner as ubuntu-latest
    participant Node as Node.js v20
    participant Claude as claude-code
    participant GH as GitHub API (gh CLI)
    rect rgb(240,248,255)
    Note over GHA,Runner: Trigger on PR opened/synchronize
    end
    GHA->>Runner: checkout repository
    Runner->>Node: setup-node@v3 (Node v20)
    Runner->>Runner: npm install -g claude-code
    Runner->>Runner: create temp prompt file (repo, PR number, focus)
    Runner->>Claude: run `claude-code` --auto --prompt-file
    rect rgb(245,255,240)
    Claude->>Claude: analyze PR using allowed tools only
    Claude->>GH: post comments via `gh pr` commands (inline comments)
    end
    GHA->>GHA: finish job

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

• Inspect workflow triggers, job permissions, and timeout
• Verify correct use of secrets (GH_TOKEN, Anthropic keys) and environment variable export
• Review claude-code invocation flags and allowed tools list for safety and correctness
• Check prompt generation logic and formatting used for automated comments
• Validate use of gh pr commands and comment placement approach

Pre-merge checks and finishing touches

_{Comment @coderabbitai help to get the list of available commands and usage tips.}