Skip to content

ci: add the Claude PR review #3

ci: add the Claude PR review

ci: add the Claude PR review #3

Workflow file for this run

name: Code Review
on:
pull_request:
types: [opened, synchronize, labeled, unlabeled]
pull_request_target:
types: [opened, synchronize]
jobs:
review:
# May also trigger on bump branches when a human updates them (acceptable double-review).
if: github.event_name == 'pull_request' && github.actor != 'scality-renovate[bot]'
uses: scality/workflows/.github/workflows/claude-code-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1
secrets:
GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
GCP_SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT }}
ANTHROPIC_VERTEX_PROJECT_ID: ${{ secrets.ANTHROPIC_VERTEX_PROJECT_ID }}
CLOUD_ML_REGION: ${{ secrets.CLOUD_ML_REGION }}
# The review prompt is a slash command shipped by the scality-skills plugin,
# which the shared workflow clones from the agent-hub marketplace with this
# app key. Without it the plugin is skipped and the review silently does
# nothing.
ACTIONS_APP_PRIVATE_KEY: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}
review-dependency-bump:
# pr.user.login catches bump PRs updated by a human, where github.actor is no longer the bot.
if: >-
github.event_name == 'pull_request_target' &&
(github.actor == 'scality-renovate[bot]' ||
github.event.pull_request.user.login == 'scality-renovate[bot]')
uses: scality/workflows/.github/workflows/claude-code-dependency-review.yml@7d91dc4ebbe136b54518aa42a1ad6014f8f91526 # v2.9.1
with:
ACTIONS_APP_ID: ${{ vars.ACTIONS_APP_ID }}
secrets:
GCP_WORKLOAD_IDENTITY_PROVIDER: ${{ secrets.GCP_WORKLOAD_IDENTITY_PROVIDER }}
GCP_SERVICE_ACCOUNT: ${{ secrets.GCP_SERVICE_ACCOUNT }}
ANTHROPIC_VERTEX_PROJECT_ID: ${{ secrets.ANTHROPIC_VERTEX_PROJECT_ID }}
CLOUD_ML_REGION: ${{ secrets.CLOUD_ML_REGION }}
ACTIONS_APP_PRIVATE_KEY: ${{ secrets.ACTIONS_APP_PRIVATE_KEY }}