32156b120b
- Add optional bubblewrap setup step for Linux subprocess isolation
when allowed_non_write_users is configured
- Use git credential helper instead of embedding token in remote URL
- edit-issue-labels.sh: read issue number from workflow event payload
instead of CLI arg
- Add CLAUDE_CODE_SCRIPT_CAPS env for per-script call limit config
- docs/security.md: note recommended github_token configuration
🏠 Remote-Dev: homespace
30 lines
914 B
YAML
30 lines
914 B
YAML
name: Claude Issue Triage
|
|
description: Run Claude Code for issue triage in GitHub Actions
|
|
on:
|
|
issues:
|
|
types: [opened]
|
|
|
|
jobs:
|
|
triage-issue:
|
|
runs-on: ubuntu-latest
|
|
timeout-minutes: 10
|
|
permissions:
|
|
contents: read
|
|
issues: write
|
|
|
|
steps:
|
|
- name: Checkout repository
|
|
uses: actions/checkout@v6
|
|
with:
|
|
fetch-depth: 0
|
|
|
|
- name: Run Claude Code for Issue Triage
|
|
uses: anthropics/claude-code-action@main
|
|
env:
|
|
CLAUDE_CODE_SCRIPT_CAPS: '{"edit-issue-labels.sh":2}'
|
|
with:
|
|
prompt: "/label-issue REPO: ${{ github.repository }} ISSUE_NUMBER: ${{ github.event.issue.number }}"
|
|
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
|
|
allowed_non_write_users: "*" # Required for issue triage workflow, if users without repo write access create issues
|
|
github_token: ${{ secrets.GITHUB_TOKEN }}
|