From e6097da70ad3d64fc8851b7fa0896eb4f2ca65e7 Mon Sep 17 00:00:00 2001
From: Jon Duea <jdueadev@gmail.com>
Date: Thu, 12 Nov 2026 23:17:46 -0600
Subject: [PATCH] fix(ci): isolate ignored review labels and trim token
 permissions

---
 .github/workflows/claude-review.yml | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index de1a7de..bbb5d6d 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -8,7 +8,7 @@ on:
     types: [opened, ready_for_review, reopened, labeled]
 
 concurrency:
-  group: claude-review-${{ github.event.pull_request.number }}
+  group: claude-review-${{ github.event.pull_request.number }}-${{ github.event.action == 'labeled' && github.event.label.name != 'claude-review' && 'ignored' || 'review' }}
   cancel-in-progress: true
 
 jobs:
@@ -23,7 +23,6 @@ jobs:
     permissions:
       contents: read
       pull-requests: write
-      issues: write
       id-token: write
     steps:
       - uses: actions/checkout@v4