fix: skip auto-review for fork PRs (#25)

Fork PRs don't have access to OIDC tokens or secrets (GitHub security
restriction), causing CI failures. Auto-review now only runs for
same-repo PRs from collaborators.

For fork PRs, use @claude mention to trigger manual review via the
claude.yml workflow.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
This commit is contained in:
Jarrod Watts
2026-01-05 11:36:13 +11:00
committed by GitHub
parent 2b7f312e0b
commit 0a9f41e191

View File

@@ -12,11 +12,8 @@ on:
jobs:
claude-review:
# Optional: Filter by PR author
# if: |
# github.event.pull_request.user.login == 'external-contributor' ||
# github.event.pull_request.user.login == 'new-developer' ||
# github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
# Skip fork PRs (no OIDC/secrets access). Use @claude mention for fork PR reviews.
if: github.event.pull_request.head.repo.full_name == github.repository
runs-on: ubuntu-latest
permissions: