Commit History
-
fix(security): remediate workflow vulnerability in .github/workflows/claude-review.yml (#231)
hf-security-analysis[bot] +1: hf-security-analysis[bot]Unverified signatureCo-authored-by: hf-security-analysis[bot] <265538906+hf-security-analysis[bot]@users.noreply.github.com>fbc10a2 -
ci: prepare Claude Code bin directory (#230)
Unverified signatureCo-authored-by: OpenAI Codex <codex@openai.com>f196f43
-
Add CI for tests and Ruff (#217)
Unverified signature* Add CI for tests and Ruff Co-authored-by: OpenAI Codex <codex@openai.com> * Enforce Ruff formatting in CI Co-authored-by: OpenAI Codex <codex@openai.com> * Document Ruff pre-commit checks Co-authored-by: OpenAI Codex <codex@openai.com> --------- Co-authored-by: OpenAI Codex <codex@openai.com>754345f
-
ci: bypass OIDC for Claude review on pull_request_target (#134)
Aksel Joonas ReediUnverified signatureThe GitHub App token-exchange endpoint rejects OIDC tokens minted for pull_request_target events ('401 Invalid OIDC token'), so every review has failed since the switch from pull_request in #123. Pass GITHUB_TOKEN directly to skip the exchange; comments post as github-actions[bot] instead of claude[bot], which is the documented trade-off.5b82e2d
-
Run Claude review for external PRs safely (#123)
Aksel Joonas ReediUnverified signature4501d69
-
ci: add REVIEW.md for tunable Claude reviews (#104)
Aksel Joonas ReediUnverified signature* ci: add REVIEW.md and inject it into the review prompt REVIEW.md is a repo-root freeform instructions file that gets prepended to the review prompt as highest-priority guidance. Lets maintainers tune severity calibration, nit caps, skip lists, and repo-specific must-checks by editing one file instead of the workflow YAML. Mirrors the pattern used by the managed Anthropic Code Review product so we keep the same levers on our self-hosted Actions setup. * review: add merge-bias, pushback norms, and What-I-checked summary Insights from the Latent Space 'harness engineering' interview: review agents should default to merge, not block; 🟡/🟣 are informational not required; author pushback without a fix is legitimate for non-Important findings; repeated disagreement is a signal REVIEW.md is missing a rule. Also adds a 'What I checked' bullet list to the summary shape so even clean LGTM reviews surface the coverage the reviewer actually applied. * review: rename severity markers to P0/…b292d83 -
ci: add automatic Claude Code review on PRs (#101)
Aksel Joonas ReediUnverified signature* ci: add Claude Code PR review + @claude mention workflows * ci: add id-token: write permission required by claude-code-action1f3fd90