chore: allow non-write users to trigger claude-code-action workflows

Co-Authored-By: Claude <noreply@anthropic.com>
Merge pull request #18209 from anthropics/hackyon/update-to-claude-code-action
2026-04-30 17:32:47 +00:00 · 2026-01-14 18:11:06 -05:00 · 2026-01-14 16:31:27 -05:00 · 2026-01-14 14:42:11 -05:00 · 2026-01-14 14:21:23 -05:00 · 2026-01-14 14:16:13 -05:00
3 changed files with 119 additions and 122 deletions
--- a/.github/workflows/claude-dedupe-issues.yml
+++ b/.github/workflows/claude-dedupe-issues.yml
@@ -17,16 +17,19 @@ jobs:
    permissions:
      contents: read
      issues: write
+      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

      - name: Run Claude Code slash command
-        uses: anthropics/claude-code-base-action@v1
+        uses: anthropics/claude-code-action@v1
        env:
          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_non_write_users: "*"
          prompt: "/dedupe ${{ github.repository }}/issues/${{ github.event.issue.number || inputs.issue_number }}"
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          claude_args: "--model claude-sonnet-4-5-20250929"
--- a/.github/workflows/claude-issue-triage.yml
+++ b/.github/workflows/claude-issue-triage.yml
@@ -11,15 +11,45 @@ jobs:
    permissions:
      contents: read
      issues: write
+      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

-      - name: Create triage prompt
+      - name: Setup GitHub MCP Server
        run: |
-          mkdir -p /tmp/claude-prompts
-          cat > /tmp/claude-prompts/triage-prompt.txt << 'EOF'
+          mkdir -p /tmp/mcp-config
+          cat > /tmp/mcp-config/mcp-servers.json << 'EOF'
+          {
+            "mcpServers": {
+              "github": {
+                "command": "docker",
+                "args": [
+                  "run",
+                  "-i",
+                  "--rm",
+                  "-e",
+                  "GITHUB_PERSONAL_ACCESS_TOKEN",
+                  "ghcr.io/github/github-mcp-server:sha-7aced2b"
+                ],
+                "env": {
+                  "GITHUB_PERSONAL_ACCESS_TOKEN": "${{ secrets.GITHUB_TOKEN }}"
+                }
+              }
+            }
+          }
+          EOF
+
+      - name: Run Claude Code for Issue Triage
+        timeout-minutes: 5
+        uses: anthropics/claude-code-action@v1
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_non_write_users: "*"
+          prompt: |
            You're an issue triage assistant for GitHub issues. Your task is to analyze the issue and select appropriate labels from the provided list.

            IMPORTANT: Don't post any comments or messages to the issue. Your only action should be to apply labels.
@@ -68,39 +98,6 @@ jobs:
            - DO NOT post any comments to the issue
            - Your ONLY action should be to apply labels using mcp__github__update_issue
            - It's okay to not add any labels if none are clearly applicable
-          EOF
-
-      - name: Setup GitHub MCP Server
-        run: |
-          mkdir -p /tmp/mcp-config
-          cat > /tmp/mcp-config/mcp-servers.json << 'EOF'
-          {
-            "mcpServers": {
-              "github": {
-                "command": "docker",
-                "args": [
-                  "run",
-                  "-i",
-                  "--rm",
-                  "-e",
-                  "GITHUB_PERSONAL_ACCESS_TOKEN",
-                  "ghcr.io/github/github-mcp-server:sha-7aced2b"
-                ],
-                "env": {
-                  "GITHUB_PERSONAL_ACCESS_TOKEN": "${{ secrets.GITHUB_TOKEN }}"
-                }
-              }
-            }
-          }
-          EOF
-
-      - name: Run Claude Code for Issue Triage
-        timeout-minutes: 5
-        uses: anthropics/claude-code-base-action@v1
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          prompt_file: /tmp/claude-prompts/triage-prompt.txt
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          claude_args: |
            --model claude-sonnet-4-5-20250929
--- a/.github/workflows/oncall-triage.yml
+++ b/.github/workflows/oncall-triage.yml
@@ -16,15 +16,45 @@ jobs:
    permissions:
      contents: read
      issues: write
+      id-token: write

    steps:
      - name: Checkout repository
        uses: actions/checkout@v4

-      - name: Create oncall triage prompt
+      - name: Setup GitHub MCP Server
        run: |
-          mkdir -p /tmp/claude-prompts
-          cat > /tmp/claude-prompts/oncall-triage-prompt.txt << 'EOF'
+          mkdir -p /tmp/mcp-config
+          cat > /tmp/mcp-config/mcp-servers.json << 'EOF'
+          {
+            "mcpServers": {
+              "github": {
+                "command": "docker",
+                "args": [
+                  "run",
+                  "-i",
+                  "--rm",
+                  "-e",
+                  "GITHUB_PERSONAL_ACCESS_TOKEN",
+                  "ghcr.io/github/github-mcp-server:sha-7aced2b"
+                ],
+                "env": {
+                  "GITHUB_PERSONAL_ACCESS_TOKEN": "${{ secrets.GITHUB_TOKEN }}"
+                }
+              }
+            }
+          }
+          EOF
+
+      - name: Run Claude Code for Oncall Triage
+        timeout-minutes: 10
+        uses: anthropics/claude-code-action@v1
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          allowed_non_write_users: "*"
+          prompt: |
            You're an oncall triage assistant for GitHub issues. Your task is to identify critical issues that require immediate oncall attention.

            Important: Don't post any comments or messages to the issues. Your only action should be to apply the "oncall" label to qualifying issues.
@@ -82,39 +112,6 @@ jobs:
               - Close calls: List any issues that almost qualified but didn't quite meet the criteria (e.g., borderline blocking, had workarounds)
               - If no issues qualified, state that clearly
               - Format the summary clearly for easy reading
-          EOF
-
-      - name: Setup GitHub MCP Server
-        run: |
-          mkdir -p /tmp/mcp-config
-          cat > /tmp/mcp-config/mcp-servers.json << 'EOF'
-          {
-            "mcpServers": {
-              "github": {
-                "command": "docker",
-                "args": [
-                  "run",
-                  "-i",
-                  "--rm",
-                  "-e",
-                  "GITHUB_PERSONAL_ACCESS_TOKEN",
-                  "ghcr.io/github/github-mcp-server:sha-7aced2b"
-                ],
-                "env": {
-                  "GITHUB_PERSONAL_ACCESS_TOKEN": "${{ secrets.GITHUB_TOKEN }}"
-                }
-              }
-            }
-          }
-          EOF
-
-      - name: Run Claude Code for Oncall Triage
-        timeout-minutes: 10
-        uses: anthropics/claude-code-base-action@v1
-        env:
-          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        with:
-          prompt_file: /tmp/claude-prompts/oncall-triage-prompt.txt
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          claude_args: |
            --mcp-config /tmp/mcp-config/mcp-servers.json
Author	SHA1	Message	Date
JB	19a829ba68	chore: allow non-write users to trigger claude-code-action workflows Co-Authored-By: Claude <noreply@anthropic.com>	2026-01-14 18:11:06 -05:00
JB	18979efb8d	Merge pull request #18209 from anthropics/hackyon/update-to-claude-code-action fix: add github_token input to claude-code-action workflows	2026-01-14 16:31:27 -05:00
JB	f77acdf149	fix: add github_token input to claude-code-action workflows	2026-01-14 14:42:11 -05:00
JB	c13cf781ef	Merge pull request #18206 from anthropics/hackyon/update-to-claude-code-action chore: add id-token write permission for claude-code-action workflows	2026-01-14 14:21:23 -05:00
JB	cc70d3ab50	chore: add id-token write permission for claude-code-action workflows The claude-code-action requires id-token: write permission for OIDC authentication. Co-Authored-By: Claude <noreply@anthropic.com> Claude-Generated-By: Claude Code (cli/claude-opus-4-5=100%) Claude-Steers: 3 Claude-Permission-Prompts: 3 Claude-Escapes: 0	2026-01-14 14:16:13 -05:00
JB	250b257c4e	Merge pull request #18198 from anthropics/hackyon/update-to-claude-code-action chore: migrate workflows from claude-code-base-action to claude-code-action	2026-01-14 13:51:04 -05:00
JB	dec754edc9	chore: migrate workflows from claude-code-base-action to claude-code-action Updates GitHub workflow files to use the new claude-code-action@v1 and replaces prompt_file with inline prompt parameter. Co-Authored-By: Claude <noreply@anthropic.com> Claude-Generated-By: Claude Code (cli/claude-opus-4-5=100%) Claude-Steers: 3 Claude-Permission-Prompts: 4 Claude-Escapes: 0	2026-01-14 13:12:00 -05:00