Update Claude Review workflow in Actions #1708

Author: yasulab

.github/workflows/claude-review.yml

@@ -1,98 +1,44 @@
-name: Claude Code Review
+name: Claude Review
 
 on:
   pull_request:
     types: [opened, synchronize]
-    # Optional: Only run on specific file changes
-    # paths:
-    #   - "src/**/*.ts"
-    #   - "src/**/*.tsx"
-    #   - "src/**/*.js"
-    #   - "src/**/*.jsx"
+  issue_comment:
+    types: [created]
 
 jobs:
   claude-review:
-    # Optional: Filter by PR author
-    # if: |
-    #   github.event.pull_request.user.login == 'external-contributor' ||
-    #   github.event.pull_request.user.login == 'new-developer' ||
-    #   github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR'
+    # ✅ 実行される場合:
+    # - PR 作成時（自動レビュー）
+    # - PR 更新時（自動レビュー）
+    # - Issueコメントで「@claude これを見て」
+    # - PR のコメントで「@claude レビューして」
     #
-    # 現時点では Org 内の MEMBER と OWNER のみが使用可能
+    # ❌ 実行されない場合:
+    # - Issueコメントでも @claude がない場合
+    # - PR のコメントでも @claude がない場合
     if: |
-      (github.event_name == 'pull_request' && 
-       contains(fromJSON('["MEMBER", "OWNER"]'), github.event.pull_request.author_association)) ||
+      (github.event_name == 'pull_request') ||
       (github.event_name == 'issue_comment' && 
-       github.event.issue.pull_request && 
-       contains(github.event.comment.body, '@claude') &&
-       contains(fromJSON('["MEMBER", "OWNER"]'), github.event.comment.author_association))
-        
+       contains(github.event.comment.body, '@claude'))
+    
     runs-on: ubuntu-latest
- 
-    # 最小限の権限のみ付与
+    
+    # 推奨: 最小限の権限のみ付与
     permissions:
-      contents:      read  # リポジトリ内容の読込/書込
-      pull-requests: read  # PRのコメントの読込/書込
-      issues:        read  # Issueのコメントの読込/書込
-      id-token:      write # 実行時に適切な権限を取得 (ココがwriteの時、上記はreadで良い)
+      contents:      read  # Repository 内の権限
+      pull-requests: read  # PR 内コメントの権限
+      issues:        read  # Issueコメントの権限
+      actions:       read  # Actionsログへの権限
+      id-token:      write # 実行時に適切な権限を取得
 
     steps:
-      - name: Checkout repository
+      - name: Checkout
         uses: actions/checkout@v4
         with:
-          fetch-depth: 1
+          fetch-depth: 2
 
-      - name: Run Claude Code Review
-        id: claude-review
-        uses: anthropics/claude-code-action@beta
+      - name: Claude Review
+        uses: yasslab/claude_review_action@main
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-
-          # Optional: Specify model (defaults to Claude Sonnet 4, uncomment for Claude Opus 4)
-          model: "claude-opus-4-20250514"
-          
-          # Direct prompt for automated review (no @claude mention needed)
-          direct_prompt: |
-            Please review this pull request and provide feedback on:
-            - Code quality and best practices
-            - Potential bugs or issues
-            - Performance considerations
-            - Security concerns
-            - Test coverage
-            
-            Be constructive and helpful in your feedback.
-            Always respond in Japanese, even if given instructions are in English.
-            Use Japanese for all outputs, explanations, and comments in code
-
-            For each heading use this HTML style that users can see your summary at first and check details when clicking:
-              <details>
-                <summary><strong>[YOUR_HEADING]</strong></summary>
-                [YOUR_FEEDBACKS]
-              </details>
-            Not that inside <details> tags you should write in HTML, not Markdown.
-
-          # Optional: Use sticky comments to make Claude reuse the same comment on subsequent pushes to the same PR
-          # use_sticky_comment: true
-          
-          # Optional: Customize review based on file types
-          # direct_prompt: |
-          #   Review this PR focusing on:
-          #   - For TypeScript files: Type safety and proper interface usage
-          #   - For API endpoints: Security, input validation, and error handling
-          #   - For React components: Performance, accessibility, and best practices
-          #   - For tests: Coverage, edge cases, and test quality
-          
-          # Optional: Different prompts for different authors
-          # direct_prompt: |
-          #   ${{ github.event.pull_request.author_association == 'FIRST_TIME_CONTRIBUTOR' && 
-          #   'Welcome! Please review this PR from a first-time contributor. Be encouraging and provide detailed explanations for any suggestions.' ||
-          #   'Please provide a thorough code review focusing on our coding standards and best practices.' }}
-          
-          # Optional: Add specific tools for running tests or linting
-          # allowed_tools: "Bash(npm run test),Bash(npm run lint),Bash(npm run typecheck)"
-          
-          # Optional: Skip review for certain conditions
-          # if: |
-          #   !contains(github.event.pull_request.title, '[skip-review]') &&
-          #   !contains(github.event.pull_request.title, '[WIP]')
-