Skip to content

Add checks/statuses read permissions to Claude workflow #12

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
justin808 merged 1 commit into from
Mar 2, 2026
Merged

Add checks/statuses read permissions to Claude workflow #12

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 5 additions & 0 deletions .github/workflows/claude.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,8 @@ jobs:
issues: read
id-token: write
actions: read # Required for Claude to read CI results on PRs
checks: read
statuses: read
steps:
- name: Checkout repository
uses: actions/checkout@v4
Expand All @@ -34,11 +36,14 @@ jobs:
id: claude
uses: anthropics/claude-code-action@v1
with:
github_token: ${{ github.token }}
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

# This is an optional setting that allows Claude to read CI results on PRs
additional_permissions: |
actions: read
checks: read
statuses: read
Copy link
Copy Markdown

@claude claude Bot Mar 2, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Possible redundancy: actions: read, checks: read, and statuses: read are already granted at the job level via the permissions block above. This additional_permissions input likely informs the Claude action which scopes it may use when constructing its own GitHub API calls — so the duplication is probably intentional. Confirm with the claude-code-action docs that this is the expected pattern.


# Optional: Give a custom prompt to Claude. If this is not specified, Claude will perform the instructions specified in the comment that tagged it.
# prompt: 'Update the pull request description to include a summary of changes.'
Expand Down