actions/claude-code-action
1
0
Fork 0
mirror of https://github.com/anthropics/claude-code-action.git synced 2026-07-28 06:48:30 +08:00
Code Issues Packages Projects Releases Wiki Activity
606 Commits 130 Branches 250 Tags
Commit Graph

93 Commits

Author SHA1 Message Date
GitHub Actions
787c5a0ce9 chore: bump Claude Code to 2.1.150 and Agent SDK to 0.3.150 2026-05-23 04:04:43 +00:00
GitHub Actions
bbfaf8e1ff chore: bump Claude Code to 2.1.149 and Agent SDK to 0.3.149 2026-05-22 22:10:12 +00:00
GitHub Actions
4481e6d3c7 chore: bump Claude Code to 2.1.148 and Agent SDK to 0.3.148 2026-05-22 01:17:47 +00:00
Ashwin Bhat
661a6fefbd
Add Workload Identity Federation (OIDC) authentication support (#1338) 
* Add workload identity federation auth support

Adds anthropic_federation_rule_id, anthropic_organization_id,
anthropic_service_account_id, anthropic_workspace_id, and
anthropic_oidc_audience inputs. When the federation rule and organization
are set, the action fetches the workflow's GitHub Actions OIDC token,
writes it to a file in RUNNER_TEMP, keeps it refreshed during execution,
and points the Claude Code CLI at it via ANTHROPIC_IDENTITY_TOKEN_FILE so
the CLI can exchange it for a short-lived access token instead of using a
static API key.

* Add WIF example workflow and base-action federation docs

* Default workload identity OIDC audience to https://api.anthropic.com
 2026-05-21 15:19:15 -07:00
GitHub Actions
c9d66afb17 chore: bump Claude Code to 2.1.147 and Agent SDK to 0.3.147 2026-05-21 20:40:16 +00:00
GitHub Actions
20c8abf165 chore: bump Claude Code to 2.1.146 and Agent SDK to 0.3.146 2026-05-21 01:52:44 +00:00
GitHub Actions
ca89df3d42 chore: bump Claude Code to 2.1.145 and Agent SDK to 0.3.145 2026-05-19 22:21:48 +00:00
GitHub Actions
24492741e0 chore: bump Claude Code to 2.1.144 and Agent SDK to 0.3.144 2026-05-19 00:49:28 +00:00
GitHub Actions
b020494b57 chore: bump Claude Code to 2.1.143 and Agent SDK to 0.3.143 2026-05-15 22:29:11 +00:00
GitHub Actions
51ea8ea73a chore: bump Claude Code to 2.1.142 and Agent SDK to 0.3.142 2026-05-14 22:56:05 +00:00
JerryLee
1450f658d3
fix: write execution file when SDK throws (#1255) 2026-05-14 15:37:28 -07:00
GitHub Actions
86eb26bf01 chore: bump Claude Code to 2.1.141 and Agent SDK to 0.2.141 2026-05-13 23:19:48 +00:00
GitHub Actions
f4fb5c6cdc chore: bump Claude Code to 2.1.140 and Agent SDK to 0.2.140 2026-05-12 21:10:29 +00:00
GitHub Actions
dde2242db6 chore: bump Claude Code to 2.1.139 and Agent SDK to 0.2.139 2026-05-11 18:44:48 +00:00
GitHub Actions
476e359e62 chore: bump Claude Code to 2.1.138 and Agent SDK to 0.2.138 2026-05-09 06:34:03 +00:00
GitHub Actions
ad67978e5e chore: bump Claude Code to 2.1.137 and Agent SDK to 0.2.137 2026-05-09 00:11:30 +00:00
GitHub Actions
034cbdb008 chore: bump Claude Code to 2.1.136 and Agent SDK to 0.2.136 2026-05-08 18:39:38 +00:00
GitHub Actions
939ae9c056 chore: bump Claude Code to 2.1.133 and Agent SDK to 0.2.133 2026-05-07 23:49:29 +00:00
GitHub Actions
9db782c3a1 chore: bump Claude Code to 2.1.132 and Agent SDK to 0.2.132 2026-05-06 22:09:09 +00:00
GitHub Actions
62238ddb33 chore: bump Claude Code to 2.1.131 and Agent SDK to 0.2.131 2026-05-06 07:48:07 +00:00
GitHub Actions
7d7d3055f1 chore: bump Claude Code to 2.1.129 and Agent SDK to 0.2.129 2026-05-06 01:40:52 +00:00
GitHub Actions
2cc1ac1331 chore: bump Claude Code to 2.1.128 and Agent SDK to 0.2.128 2026-05-04 23:02:42 +00:00
GitHub Actions
fefa07e9c6 chore: bump Claude Code to 2.1.126 and Agent SDK to 0.2.126 2026-05-01 02:05:59 +00:00
GitHub Actions
ef50f123a3 chore: bump Claude Code to 2.1.123 and Agent SDK to 0.2.123 2026-04-29 03:29:24 +00:00
GitHub Actions
b3c0320e7e chore: bump Claude Code to 2.1.122 and Agent SDK to 0.2.122 2026-04-28 22:05:53 +00:00
GitHub Actions
11a9dadd19 chore: bump Claude Code to 2.1.121 and Agent SDK to 0.2.121 2026-04-28 00:31:46 +00:00
GitHub Actions
567fe954a4 chore: bump Claude Code to 2.1.119 and Agent SDK to 0.2.119 2026-04-25 01:55:30 +00:00
GitHub Actions
2da6cfae68 chore: bump Claude Code to 2.1.120 and Agent SDK to 0.2.120 2026-04-25 00:15:05 +00:00
GitHub Actions
e58dfa5555 chore: bump Claude Code to 2.1.119 and Agent SDK to 0.2.119 2026-04-23 23:24:21 +00:00
GitHub Actions
b4d6741327 chore: bump Claude Code to 2.1.118 and Agent SDK to 0.2.118 2026-04-23 00:42:34 +00:00
GitHub Actions
4e5d8b13ca chore: bump Claude Code to 2.1.117 and Agent SDK to 0.2.117 2026-04-22 00:04:56 +00:00
GitHub Actions
5d5c10a4f3 chore: bump Claude Code to 2.1.116 and Agent SDK to 0.2.116 2026-04-20 22:18:45 +00:00
GitHub Actions
38ec876110 chore: bump Claude Code to 2.1.114 and Agent SDK to 0.2.114 2026-04-18 01:38:24 +00:00
Ashwin Bhat
0d2971c794
fix: pass install.sh binary path explicitly to Agent SDK (#1235) 
Agent SDK 0.2.113 dropped vendor/ripgrep and now ships native binaries
via per-platform optionalDependencies. Two breakages:

- action.yml chmod'd vendor/ripgrep which no longer exists, failing the
  Install Dependencies step with find exit 1.
- The SDK auto-resolves its bundled binary by trying the -musl platform
  package before the glibc one. bun install does not respect the
  package.json libc field and installs both on glibc Linux, so the SDK
  picks the musl binary and spawn fails with ENOENT.

Remove the obsolete ripgrep chmod. Make installClaudeCode() return the
install.sh binary path and pass it explicitly as
pathToClaudeCodeExecutable so the SDK skips auto-resolution entirely.
 2026-04-17 15:50:46 -07:00
GitHub Actions
c68f82cb11 chore: bump Claude Code to 2.1.113 and Agent SDK to 0.2.113 2026-04-17 19:40:20 +00:00
GitHub Actions
c3d45e8e94 chore: bump Claude Code to 2.1.112 and Agent SDK to 0.2.112 2026-04-16 20:00:08 +00:00
GitHub Actions
931e620273 chore: bump Claude Code to 2.1.111 and Agent SDK to 0.2.111 2026-04-16 15:22:22 +00:00
GitHub Actions
905d4eb99a chore: bump Claude Code to 2.1.110 and Agent SDK to 0.2.110 2026-04-15 22:06:40 +00:00
GitHub Actions
5fb899572b chore: bump Claude Code to 2.1.109 and Agent SDK to 0.2.109 2026-04-15 04:05:34 +00:00
GitHub Actions
3943183052 chore: bump Claude Code to 2.1.108 and Agent SDK to 0.2.108 2026-04-14 19:16:11 +00:00
GitHub Actions
65f29cf68e chore: bump Claude Code to 2.1.107 and Agent SDK to 0.2.107 2026-04-14 06:14:35 +00:00
GitHub Actions
1c8b699d43 chore: bump Claude Code to 2.1.105 and Agent SDK to 0.2.105 2026-04-13 21:56:13 +00:00
GitHub Actions
25474bfe8b chore: bump Claude Code to 2.1.104 and Agent SDK to 0.2.104 2026-04-12 03:21:43 +00:00
GitHub Actions
b47fd721da chore: bump Claude Code to 2.1.101 and Agent SDK to 0.2.101 2026-04-10 19:06:59 +00:00
GitHub Actions
c26cb6427d chore: bump Claude Code to 2.1.100 and Agent SDK to 0.2.98 2026-04-10 05:15:24 +00:00
GitHub Actions
657fb7c9c9 chore: bump Claude Code to 2.1.98 and Agent SDK to 0.2.98 2026-04-09 19:21:28 +00:00
GitHub Actions
2ff1acb3ee chore: bump Claude Code to 2.1.97 and Agent SDK to 0.2.97 2026-04-08 21:55:30 +00:00
GitHub Actions
26ddc358fe chore: bump Claude Code to 2.1.96 and Agent SDK to 0.2.96 2026-04-08 04:40:59 +00:00
GitHub Actions
398370690e chore: bump Claude Code to 2.1.94 and Agent SDK to 0.2.94 2026-04-07 21:22:37 +00:00
Max Flanagan
6cad158a17
security: reject PATH_TO_CLAUDE_CODE_EXECUTABLE with control characters (#1185) 
dirname() preserves embedded newlines, so a value like
`/usr/bin/claude\n/attacker/path` writes two lines to GITHUB_PATH,
injecting an attacker-controlled directory into PATH for all subsequent
workflow steps.

Validate the input immediately after reading it and throw if it
contains any control characters (0x00-0x1f, 0x7f). This is fail-closed
rather than silent stripping — a path with control characters is always
misconfigured or malicious.

Fixes #1160

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-05 17:26:08 -07:00