Skip to content

Fix Claude Code workflow permissions #20

@BenGWeeks

Description

@BenGWeeks

Issue: Claude Code Workflow Permission Mismatch

The Claude Code GitHub Actions workflows have insufficient permissions that will prevent them from functioning correctly.

Affected Files

  1. .github/workflows/claude.yml
  2. .github/workflows/claude-code-review.yml

Problems

In claude.yml:

  • Currently has: contents: read, pull-requests: read, issues: read
  • Needs: contents: write, pull-requests: write, issues: write
  • Why: Claude needs write permissions to create comments, branches, and commits as described in the workflow documentation

In claude-code-review.yml:

  • Currently has: pull-requests: read
  • Needs: pull-requests: write
  • Why: The workflow instructs Claude to use `gh pr comment` which requires write permission to post review comments

Solution

Update the permissions in both files:

For claude.yml, change:
```yaml
permissions:
contents: write
pull-requests: write
issues: write
id-token: write
actions: read
```

For claude-code-review.yml, change:
```yaml
permissions:
contents: read
pull-requests: write
issues: read
id-token: write
```

Reference

This issue was identified during review of PR #4 in zendesk-zapdesk-helpcenter repository.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions