From f558c14b24724ad7b506ff2877af870b0dc62d1f Mon Sep 17 00:00:00 2001 From: Test User Date: Fri, 30 Jan 2026 13:11:31 -0700 Subject: [PATCH] fix(ci): add explicit github_token for pull_request_target The OIDC token exchange fails with pull_request_target events. Provide explicit github_token to fix authentication. Also upgrade to pull-requests: write for posting comments. --- .github/workflows/claude-code-review.yml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index e3d5f32..fe044ae 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -23,7 +23,7 @@ jobs: runs-on: ubuntu-latest permissions: contents: read - pull-requests: read + pull-requests: write # Needed to post review comments issues: read id-token: write @@ -55,6 +55,8 @@ jobs: uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + # Explicit github_token needed for pull_request_target (OIDC doesn't work) + github_token: ${{ secrets.GITHUB_TOKEN }} prompt: | REPO: ${{ github.repository }} PR NUMBER: ${{ github.event.pull_request.number }}