From 1cdfc04050da9f2a7ad9579fdcd8cf9bbc219090 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Carlos=20Flor=C3=AAncio?= Date: Fri, 17 Apr 2026 23:27:49 +0100 Subject: [PATCH] ci: pass GITHUB_TOKEN to claude-code-action to bypass OIDC exchange (#629) --- .github/workflows/claude-code-review.yml | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index a1e3e4c775..ab980e65fb 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -41,6 +41,11 @@ jobs: uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + # Skip the Claude GitHub App's OIDC -> installation-token exchange, + # which 401s on pull_request_target from forks. GITHUB_TOKEN inherits + # pull-requests: write from the permissions block above, which is + # enough for the action to post review comments. + github_token: ${{ secrets.GITHUB_TOKEN }} track_progress: true allowed_bots: "*" prompt: |