Skip to content

Fix #3636: Prevents non-constant DEFAULT column constraint value. #3344

Fix #3636: Prevents non-constant DEFAULT column constraint value.

Fix #3636: Prevents non-constant DEFAULT column constraint value. #3344

Workflow file for this run

name: Claude Code
on:
issue_comment:
types: [created]
pull_request_review_comment:
types: [created]
pull_request_review:
types: [submitted]
issues:
types: [assigned]
jobs:
claude:
concurrency:
group: claude-${{ github.event.issue.number || github.event.pull_request.number }}
cancel-in-progress: false
# Only run when:
# 1. @claude is mentioned in a comment on an issue or PR by an authorized user
# 2. @claude is mentioned in a PR review by an authorized user
# 3. claude[bot] is assigned to an issue
#
# Authorized users: OWNER, MEMBER, COLLABORATOR (prevents abuse by external users)
if: |
(
contains(fromJSON('["issue_comment", "pull_request_review_comment"]'), github.event_name) &&
contains(github.event.comment.body, '@claude') &&
contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.comment.author_association)
) ||
(
github.event_name == 'pull_request_review' &&
contains(github.event.review.body, '@claude') &&
contains(fromJSON('["OWNER", "MEMBER", "COLLABORATOR"]'), github.event.review.author_association)
) ||
(
github.event_name == 'issues' &&
github.event.assignee.login == 'claude[bot]'
)
runs-on: ubuntu-latest
timeout-minutes: 30
permissions:
contents: write
issues: write
pull-requests: write
actions: read
id-token: write
steps:
- name: Checkout repository
uses: actions/checkout@v4
with:
fetch-depth: 1
- name: Set up Rust
uses: dtolnay/rust-toolchain@stable
with:
components: rustfmt, clippy
- name: Cache Rust dependencies
uses: Swatinem/rust-cache@v2
- name: Run Claude
uses: anthropics/claude-code-action@v1
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
branch_prefix: "claude/"
additional_permissions: |
actions: read
claude_args: |
--model claude-opus-4-5-20251101
--max-turns 100
--allowedTools "Bash(cargo:*),Bash(git:*),Bash(make:*),Bash(rustfmt:*),Bash(python:*),Edit,Write,Read,Glob,Grep,TodoWrite,Task,WebSearch"
--disallowedTools "Bash(rm -rf *),Bash(sudo *),Bash(curl *),Bash(wget *)"