From 17a08090fa153d2e8546fb19e5ddd2d3ae2d0c22 Mon Sep 17 00:00:00 2001 From: Claude Code Bot Date: Sat, 18 Apr 2026 20:56:43 -0700 Subject: [PATCH] ci: allow bot actors to invoke claude-code-action claude-code-action@v1 rejects runs where github.actor is a Bot unless listed in allowed_bots. The `if:` guard in this workflow already filters on @claude mention content, so the allowlist only names bots whose events are legitimate secondary triggers. Named list, not `*`. Co-Authored-By: Claude Opus 4.7 (1M context) --- .github/workflows/claude.yml | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 94dcce5..f230fe5 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -34,6 +34,10 @@ jobs: id: claude uses: anthropics/claude-code-action@v1 with: + # claude-code-action rejects non-User actors unless explicitly allowed. + # The `if:` guard above still filters on @claude mention content; this + # list only names bots whose comments/issues are legitimate triggers. + allowed_bots: "claude[bot],github-actions[bot]" claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} # This is an optional setting that allows Claude to read CI results on PRs