From 3499eafe5f0fbbae4cfef1092c572f4fd8e52eeb Mon Sep 17 00:00:00 2001 From: Jonny Spicer Date: Tue, 14 Jul 2026 09:52:18 +0100 Subject: [PATCH] Grant workflows write access so Claude can post PR comments MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The GitHub App scaffold ships both workflows with pull-requests: read and issues: read, so the review runs and analyses the diff but is denied when it tries to post — the job goes green with no comment (permission_denials_count: 1 in the run log). Bump pull-requests and issues to write on both the auto-review and the @claude assistant workflows. Must land on the default branch: claude-code-action refuses to run when the workflow file on a PR branch differs from the default branch, so this only takes effect on PRs opened after it merges to main. Co-Authored-By: Claude Opus 4.8 (1M context) --- .github/workflows/claude-code-review.yml | 4 ++-- .github/workflows/claude.yml | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index b5e8cfd..21cb993 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -21,8 +21,8 @@ jobs: runs-on: ubuntu-latest permissions: contents: read - pull-requests: read - issues: read + pull-requests: write + issues: write id-token: write steps: diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index 6b15fac..2d8fdf7 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -20,8 +20,8 @@ jobs: runs-on: ubuntu-latest permissions: contents: read - pull-requests: read - issues: read + pull-requests: write + issues: write id-token: write actions: read # Required for Claude to read CI results on PRs steps: