Permit Claude triage workflow for users without write permission (#22026)
* Permit triage workflow for users without write permission * Bump claude-code-action to v1.0.108
This commit is contained in:
parent
8fbb6f74d3
commit
b76f313ca4
|
|
@ -20,10 +20,11 @@ jobs:
|
|||
|
||||
- name: Run Claude Issue Triage
|
||||
id: claude-triage
|
||||
uses: anthropics/claude-code-action@e763fe78de2db7389e04818a00b5ff8ba13d1360 # v1
|
||||
uses: anthropics/claude-code-action@11a9dadd198803a0cea6bd53da3e0e8a762fc6ea # v1.0.108
|
||||
with:
|
||||
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
||||
github_token: ${{ secrets.GITHUB_TOKEN }}
|
||||
allowed_non_write_users: "*"
|
||||
# Restrict Claude to read-only inspection of the repo plus posting a single comment
|
||||
# on THIS issue only. `gh issue comment` is pinned to the current issue number, so an
|
||||
# injection cannot redirect a comment to another issue. Close, label, reopen, assign,
|
||||
|
|
@ -33,7 +34,7 @@ jobs:
|
|||
# reduce the blast radius of an injection that tries to dump runner env vars or
|
||||
# secrets into a comment body.
|
||||
claude_args: >-
|
||||
--allowed-tools
|
||||
--allowedTools
|
||||
"Bash(gh issue view:*),Bash(gh issue list:*),Bash(gh search issues:*),Bash(gh issue comment ${{ github.event.issue.number }}:*),Bash(gh release list:*),Bash(gh release view:*),Read,Grep,Glob"
|
||||
prompt: |
|
||||
You are triaging a newly opened issue in the netbox-community/netbox repository.
|
||||
|
|
|
|||
Loading…
Reference in New Issue