review.yaml

name: Code Review
run-name: 'Code Review for #${{ github.event.pull_request.number || inputs.pr_number }}${{ github.event.pull_request.title && format('' : {0}'', github.event.pull_request.title) }}'

on:
  pull_request:
    types: [opened, synchronize]
  pull_request_target:
    types: [opened, synchronize]
  workflow_dispatch:
    inputs:
      pr_number:
        description: Pull Request number to review
        required: true

jobs:
  review:
    if: github.event_name != 'pull_request_target' && github.actor != 'dependabot[bot]'
    uses: scality/workflows/.github/workflows/claude-code-review.yml@v2
    with:
      allowed-tools: >-
        ${{ github.event_name == 'workflow_dispatch' && '"Bash(gh api repos/*/contents)"' || '' }}
    secrets: inherit

  review-dependency-bump:
    if: github.event_name == 'pull_request_target' && github.actor == 'dependabot[bot]'
    uses: scality/workflows/.github/workflows/claude-code-dependency-review.yml@v2
    with:
      ACTIONS_APP_ID: ${{ vars.ACTIONS_APP_ID }}
    secrets: inherit