fix(workflow): remove 'labeled' event from issue triggers and clean up permissions (#7836)

This commit is contained in:
Andras Bacsai 2026-01-01 12:11:32 +01:00 committed by GitHub
commit f6a59fa2dc
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -6,7 +6,7 @@ on:
pull_request_review_comment:
types: [created]
issues:
types: [opened, assigned, labeled]
types: [opened, assigned]
pull_request_review:
types: [submitted]
@ -16,15 +16,13 @@ jobs:
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
(github.event_name == 'issues' && github.event.action == 'labeled' && (github.event.label.name == 'claude' || github.event.label.name == 'Claude' || github.event.label.name == 'CLAUDE')) ||
(github.event_name == 'issues' && github.event.action != 'labeled' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
runs-on: ubuntu-latest
permissions:
contents: write
pull-requests: write
issues: write
id-token: write
actions: read # Required for Claude to read CI results on PRs
steps:
- name: Checkout repository
uses: actions/checkout@v4
@ -37,11 +35,3 @@ jobs:
with:
claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
claude_args: '--model opus'
# This is an optional setting that allows Claude to read CI results on PRs
additional_permissions: |
actions: read
# When triggered by Claude label, provide default prompt to work on the issue
prompt: ${{ github.event.action == 'labeled' && 'ultrathink Please analyze this issue and implement a solution. Follow the project guidelines in CLAUDE.md.' || '' }}