Use centralized Claude Code Review workflow

[justin808]

Summary

• Replaces the inline Claude Code Review workflow with a call to the shared reusable workflow in shakacode/.github
• Removes the hardcoded --model claude-sonnet-4-5-20250929 — uses Claude Code's default model (currently Opus 4.6)
• Future model or config changes only need to be made in one place

Dependencies

• Requires shakacode/.github#4 to be merged first

Test plan

• Merge Add reusable Claude Code Review workflow .github#4 first
• Merge this PR
• Open a test PR to verify the review workflow triggers correctly

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated internal CI/CD workflow configuration to use an optimized external workflow setup, improving development infrastructure maintainability.

[coderabbitai]

Walkthrough

The CLAUDE code review workflow has been refactored to delegate responsibility to a reusable external workflow maintained in shakacode/.github instead of managing the configuration inline. This change reduces workflow complexity by 46 lines while maintaining functionality.

Changes

Cohort / File(s)	Summary
Workflow Configuration .github/workflows/claude-code-review.yml	Replaced verbose inline CLAUDE setup with external reusable workflow reference from shakacode/.github. Simplified configuration by delegating job logic, steps, and permissions management.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~8 minutes

Poem

🐰 A workflow once tangled in lines forty-nine,
Now delegates cleanly to shakacode's design.
Three lines of grace, where verbosity lay,
External wisdom guides the CLAUDE code review way! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'Use centralized Claude Code Review workflow' directly and clearly describes the main change: replacing an inline workflow with a centralized reusable workflow from shakacode/.github.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch jg/use-centralized-review-workflow

---

No actionable comments were generated in the recent review. 🎉

🧹 Recent nitpick comments

.github/workflows/claude-code-review.yml (1)

9-11: Consider pinning the reusable workflow to a commit SHA instead of @main.

Referencing @main means any push to the shared repo's main branch immediately affects this workflow, including potentially breaking or malicious changes. GitHub recommends pinning reusable workflows to a full commit SHA for supply-chain safety (e.g., @<commit-sha>), with a comment noting the version. Since this is within the same org, the risk is lower, and the convenience of auto-updating is the stated goal — so this is a tradeoff worth acknowledging rather than a blocker.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

This PR centralizes the Claude Code Review GitHub Actions workflow by replacing the repository-local, inline workflow definition with a call to the shared reusable workflow in shakacode/.github, aiming to make future model/config updates happen in one place.

Changes:

• Replaced the inline anthropics/claude-code-action job with a reusable workflow call.
• Removed the hardcoded Claude model argument, relying on the shared workflow/default model configuration.
• Passed CLAUDE_CODE_OAUTH_TOKEN into the reusable workflow via secrets.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

Using shakacode/.github/...@main means this repo’s workflow behavior can change without any change in this repository (and can be impacted by a compromise of that branch). Prefer pinning to a tag or commit SHA for supply-chain safety and reproducibility, updating intentionally when you want changes.

Suggested change

	uses: shakacode/.github/.github/workflows/claude-code-review.yml@main
	uses: shakacode/.github/.github/workflows/claude-code-review.yml@4f3c2b1a0d9e8f7c6b5a49382716e5d4c3b2a1f

[Copilot]

The reusable workflow will run with the caller workflow’s GITHUB_TOKEN permissions. This workflow no longer sets explicit permissions (the previous inline job did), so the called workflow may not be able to request an OIDC token (id-token: write) or post PR comments (pull-requests: write) depending on repo defaults. Recommend adding an explicit permissions: block (either at workflow top-level or under this job) matching what the reusable workflow needs (see .github/workflows/claude.yml for the permissions previously required).

Suggested change

	claude-review:
	claude-review:
	permissions:
	id-token: write
	pull-requests: write