ci: pass GITHUB_TOKEN to claude-code-action to bypass OIDC exchange (#629)

2026-04-17 23:27:49 +01:00
parent cd46516cef
commit 1cdfc04050
1 changed files with 5 additions and 0 deletions
@@ -41,6 +41,11 @@ jobs:
        uses: anthropics/claude-code-action@v1
        with:
          claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
+          # Skip the Claude GitHub App's OIDC -> installation-token exchange,
+          # which 401s on pull_request_target from forks. GITHUB_TOKEN inherits
+          # pull-requests: write from the permissions block above, which is
+          # enough for the action to post review comments.
+          github_token: ${{ secrets.GITHUB_TOKEN }}
          track_progress: true
          allowed_bots: "*"
          prompt: |