Skip to content

Commit eaab577

Browse files
committed
dev-inf: Use GITHUB_TOKEN for Claude Code review action
The action's OIDC token exchange is failing, likely because the GitHub app isn't configured to accept OIDC tokens from this workflow. By explicitly providing the built-in GITHUB_TOKEN, we bypass the OIDC exchange entirely. The built-in token has sufficient permissions for PR analysis and commenting, which is all this workflow needs. Release note: None Epic: None
1 parent 2ac56a2 commit eaab577

File tree

1 file changed

+4
-0
lines changed

1 file changed

+4
-0
lines changed

.github/workflows/pr-analyzer-threestage.yml

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -29,6 +29,7 @@ jobs:
2929
id: stage1
3030
uses: cockroachdb/claude-code-action@v1
3131
with:
32+
github_token: ${{ secrets.GITHUB_TOKEN }}
3233
use_vertex: "true"
3334
claude_args: |
3435
--model claude-sonnet-4-5-20250929
@@ -63,6 +64,7 @@ jobs:
6364
if: contains(steps.stage1.outputs.result, 'STAGE1_RESULT - POTENTIAL_BUG_DETECTED')
6465
uses: cockroachdb/claude-code-action@v1
6566
with:
67+
github_token: ${{ secrets.GITHUB_TOKEN }}
6668
use_vertex: "true"
6769
claude_args: |
6870
--model claude-4-5-sonnet-20250929
@@ -98,6 +100,7 @@ jobs:
98100
if: contains(steps.stage2.outputs.result, 'STAGE2_RESULT - POTENTIAL_BUG_DETECTED')
99101
uses: cockroachdb/claude-code-action@v1
100102
with:
103+
github_token: ${{ secrets.GITHUB_TOKEN }}
101104
use_vertex: "true"
102105
claude_args: |
103106
--model claude-4-5-sonnet-20250929
@@ -147,6 +150,7 @@ jobs:
147150
if: always()
148151
uses: cockroachdb/claude-code-action@v1
149152
with:
153+
github_token: ${{ secrets.GITHUB_TOKEN }}
150154
use_vertex: "true"
151155
claude_args: |
152156
--model claude-4-5-sonnet-20250929

0 commit comments

Comments
 (0)