Permit Claude triage workflow for users without write permission (#22026)

* Permit triage workflow for users without write permission

* Bump claude-code-action to v1.0.108
This commit is contained in:
Jeremy Stretch 2026-04-28 12:08:03 -04:00 committed by GitHub
parent 8fbb6f74d3
commit b76f313ca4
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 2 deletions

View File

@ -20,10 +20,11 @@ jobs:
- name: Run Claude Issue Triage
id: claude-triage
uses: anthropics/claude-code-action@e763fe78de2db7389e04818a00b5ff8ba13d1360 # v1
uses: anthropics/claude-code-action@11a9dadd198803a0cea6bd53da3e0e8a762fc6ea # v1.0.108
with:
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
github_token: ${{ secrets.GITHUB_TOKEN }}
allowed_non_write_users: "*"
# Restrict Claude to read-only inspection of the repo plus posting a single comment
# on THIS issue only. `gh issue comment` is pinned to the current issue number, so an
# injection cannot redirect a comment to another issue. Close, label, reopen, assign,
@ -33,7 +34,7 @@ jobs:
# reduce the blast radius of an injection that tries to dump runner env vars or
# secrets into a comment body.
claude_args: >-
--allowed-tools
--allowedTools
"Bash(gh issue view:*),Bash(gh issue list:*),Bash(gh search issues:*),Bash(gh issue comment ${{ github.event.issue.number }}:*),Bash(gh release list:*),Bash(gh release view:*),Read,Grep,Glob"
prompt: |
You are triaging a newly opened issue in the netbox-community/netbox repository.