Commit graph

10 commits

Author SHA1 Message Date
Daniel Chalef
50659cc805
Disable fork PR comment job in workflow (#1047)
Disable fork PR comment job in Claude Code review workflow

The notify-external-contributor job fails with "Resource not accessible by integration" error when triggered by PRs from forks. GitHub security restrictions limit fork PRs to read-only GITHUB_TOKEN, preventing comment creation despite having pull-requests:write permissions.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-11-05 08:31:06 -08:00
Daniel Chalef
c5714bb3b2
Potential fix for code scanning alert no. 24: Workflow does not contain permissions (#1036)
* Potential fix for code scanning alert no. 24: Workflow does not contain permissions

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Update .github/workflows/claude-code-review.yml

---------

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
2025-10-30 19:49:48 -07:00
Daniel Chalef
b7358e52eb
Secure Claude PR reviews with two-workflow approach (#999)
Fixes permission errors for fork PRs while maintaining security.

Changes:
- Split into automatic (internal) and manual (fork) workflows
- Add fork detection to prevent auto-review of external PRs
- Add security-hardened prompts preventing secret disclosure
- Create manual workflow for maintainer-triggered fork reviews
- Add friendly notification for external contributors

Security model:
- Internal PRs: Auto-reviewed (trusted contributors)
- Fork PRs: Human gate-keeping required before optional Claude review
- Prevents prompt injection attacks via untrusted PR content

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-12 09:41:13 -07:00
Daniel Chalef
443f972f45
Refactor issue workflows for improved automation (#964)
- Consolidate issue-triage.yml and issue-deduplication.yml into single workflow with sequential jobs
- Create daily_issue_maintenance.yml with three jobs:
  - find-legacy-duplicates: Manual job to scan all open issues for duplicates
  - check-stale-issues: Daily job to request confirmation on issues >60 days old
  - close-unconfirmed-issues: Daily job to close issues without confirmation after 14 days
- Update triage to use gh CLI tools with database-specific labels (neo4j, falkordb, neptune)
- Separate deduplication into dedicated job using MCP GitHub tools
- Add "duplicate" label to both real-time and batch deduplication workflows
- Update claude-code-review.yml to use latest Sonnet model

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-02 11:37:19 -07:00
Daniel Chalef
4a9bcd5b10
Update Claude review prompt to focus on critical feedback (#960)
chore: Update Claude review prompt to focus on critical feedback only

Added instruction to eliminate positive feedback from code reviews, reducing noise and focusing on actionable improvements.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
2025-10-01 13:31:05 -07:00
Daniel Chalef
2541215698
Update claude-code-review.yml (#883) 2025-08-30 08:21:46 -07:00
Daniel Chalef
3dc2857077
Update claude-code-review.yml (#880) 2025-08-29 08:52:10 -07:00
Daniel Chalef
9b14a110d3
Update claude-code-review.yml (#876) 2025-08-28 20:46:17 -07:00
Daniel Chalef
94df836396
Fix Claude actions (#693)
fix actions
2025-07-09 08:21:44 -07:00
Daniel Chalef
6b50f1eaab
Add Claude Code GitHub Workflow (#690)
* Claude PR Assistant workflow

* Claude Code Review workflow
2025-07-08 23:20:56 -07:00