-
Notifications
You must be signed in to change notification settings - Fork 0
Open
Description
Issue: Claude Code Workflow Permission Mismatch
The Claude Code GitHub Actions workflows have insufficient permissions that will prevent them from functioning correctly.
Affected Files
.github/workflows/claude.yml.github/workflows/claude-code-review.yml
Problems
In claude.yml:
- Currently has:
contents: read,pull-requests: read,issues: read - Needs:
contents: write,pull-requests: write,issues: write - Why: Claude needs write permissions to create comments, branches, and commits as described in the workflow documentation
In claude-code-review.yml:
- Currently has:
pull-requests: read - Needs:
pull-requests: write - Why: The workflow instructs Claude to use `gh pr comment` which requires write permission to post review comments
Solution
Update the permissions in both files:
For claude.yml, change:
```yaml
permissions:
contents: write
pull-requests: write
issues: write
id-token: write
actions: read
```
For claude-code-review.yml, change:
```yaml
permissions:
contents: read
pull-requests: write
issues: read
id-token: write
```
Reference
This issue was identified during review of PR #4 in zendesk-zapdesk-helpcenter repository.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels