ci: add the Claude PR review #3
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Code Review | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, labeled, unlabeled] | |
| pull_request_target: | |
| types: [opened, synchronize] | |
| jobs: | |
| review: | |
| # May also trigger on bump branches when a human updates them (acceptable double-review). | |
| if: github.event_name == 'pull_request' && github.actor != 'scality-renovate[bot]' | |
| uses: scality/workflows/.github/workflows/claude-code-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1 | |
| secrets: | |
| GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }} | |
| GCP_SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT }} | |
| ANTHROPIC_VERTEX_PROJECT_ID: ${{ secrets.ANTHROPIC_VERTEX_PROJECT_ID }} | |
| CLOUD_ML_REGION: ${{ secrets.CLOUD_ML_REGION }} | |
| # The review prompt is a slash command shipped by the scality-skills plugin, | |
| # which the shared workflow clones from the agent-hub marketplace with this | |
| # app key. Without it the plugin is skipped and the review silently does | |
| # nothing. | |
| ACTIONS_APP_PRIVATE_KEY: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }} | |
| review-dependency-bump: | |
| # pr.user.login catches bump PRs updated by a human, where github.actor is no longer the bot. | |
| if: >- | |
| github.event_name == 'pull_request_target' && | |
| (github.actor == 'scality-renovate[bot]' || | |
| github.event.pull_request.user.login == 'scality-renovate[bot]') | |
| uses: scality/workflows/.github/workflows/claude-code-dependency-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1 | |
| with: | |
| ACTIONS_APP_ID: ${{ vars.ACTIONS_APP_ID }} | |
| secrets: | |
| GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }} | |
| GCP_SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT }} | |
| ANTHROPIC_VERTEX_PROJECT_ID: ${{ secrets.ANTHROPIC_VERTEX_PROJECT_ID }} | |
| CLOUD_ML_REGION: ${{ secrets.CLOUD_ML_REGION }} | |
| ACTIONS_APP_PRIVATE_KEY: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }} |