Skip to content

Add checks/statuses read permissions to Claude workflow #700

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
justin808 merged 1 commit into from
Mar 2, 2026
Merged

Add checks/statuses read permissions to Claude workflow #700

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/claude.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ jobs:
issues: read
id-token: write
actions: read # Required for Claude to read CI results on PRs
checks: read
statuses: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand All @@ -34,11 +36,14 @@ jobs:
id: claude
uses: anthropics/claude-code-action@v1
with:
github_token: ${{ github.token }}
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

# This is an optional setting that allows Claude to read CI results on PRs
additional_permissions: |
Copy link

@claude claude bot Mar 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The additional_permissions block now lists actions: read, checks: read, and statuses: read — all of which are already granted at the job level above. The duplication is intentional (the action uses this input to know which scopes it may call), but a brief comment here would prevent future readers from thinking the entries are accidental or redundant.

Suggested change
additional_permissions: |
# additional_permissions mirrors the job-level permissions so the action
# knows which GitHub API scopes it is allowed to use at runtime.
additional_permissions: |
actions: read
checks: read
statuses: read

actions: read
checks: read
statuses: read

# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
# prompt: 'Update the pull request description to include a summary of changes.'
Expand Down