ci: add claude-review caller workflow - #49
Merged
Conversation
Wire standards into the ci-workflows claude-review reusable workflow as the first external consumer. Triggers on pull_request (fork PRs get no secrets and are not reviewed by design); passes CLAUDE_CODE_OAUTH_TOKEN explicitly rather than via secrets: inherit (least privilege). Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01W4D4GgeYg7k6yU1DSzweij
This was referenced Jun 28, 2026
kyle-sexton
added a commit
to melodic-software/claude-code-plugins
that referenced
this pull request
Jun 28, 2026
Adds `.github/workflows/claude-review.yml` — a thin caller wiring this repo into the `ci-workflows` `claude-review` reusable workflow, consistent with the validated pattern (pilot: melodic-software/standards#49). Triggers on `pull_request` only (fork PRs get no secrets, not reviewed by design); passes `CLAUDE_CODE_OAUTH_TOKEN` explicitly (least privilege). The introducing PR self-skips via the action's first-add guard and activates on merge. (Supersedes the earlier API-made PR, which was unsigned and blocked by the required-signatures rule; this commit is SSH-signed.) 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
3 tasks
kyle-sexton
added a commit
that referenced
this pull request
Jul 15, 2026
… style (#124) ## Summary Codifies six open decisions from the org's issue/PR consistency assessment into `conventions/process/issue-tracker.md`: - **#9** `entities-governance-doc-topology-reference-style` — abstracts the personal-vs-org repo-topology prose (no more named `melodic-software/github-iac` / `kyle-sexton/github-iac` links); points at `github-iac`'s `GovernedRepositories.cs` as the sole source of truth for which repositories are governed and how. - **#23** `entities-closing-keyword-house-style-convention` — codifies native GitHub closing keywords (`Closes`/`Fixes`/`Resolves` `#N`) as the default house style, with `provisioning`'s stricter requirement (native keyword plus a manual `## Related` section, per decisions #58/#59) as the one named exception. - **#25** `naming-issue-title-vocabulary-governance` — codifies issue titles as free text with no enforced prefix vocabulary (no `[CC]`-style conventional-commit tags), documenting the existing silence as a deliberate choice. - **#45** `entities-assignee-claiming-guidance-relevance` — keeps the existing assignee-plus-lease claiming guidance but marks it explicitly deferred, with an activation trigger (required reviewers / multi-maintainer assignment contention). - **#48** `metadata-codeowners-adoption` — adds a one-line note that CODEOWNERS adoption is deferred, contingent on decision #11 (`required_approving_review_count` staying at 0 org-wide) — CODEOWNERS is inert without required reviews. - **#49** `comments-codify-human-conventions` — codifies three optional documented conventions: a 🤖 footer marking bot-authored comments, citing evidence when closing on it, and a 🔒 marker for claimed issues (explicitly framed as the lightweight interim signal until #45's mechanism activates). Decisions Log: https://claude.ai/code/artifact/232ecdce-8316-4880-8c0a-dc3c7dcf3a63 ## Test plan - [x] `lefthook run pre-commit` — typos, editorconfig, gitleaks, markdownlint all pass - [x] Grepped the file for residual `kyle-sexton`/named `github-iac` repo references — none remain - [ ] Human review of tone/placement against the rest of the process conventions 🤖 Generated with [Claude Code](https://claude.com/claude-code) --------- Co-authored-by: Claude Sonnet 5 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Adds
.github/workflows/claude-review.yml— a thin caller that wiresstandardsinto theci-workflowsclaude-reviewreusable workflow. This is the first external consumer of that reusable workflow (until now onlyci-workflowsdogfooded it via a local./ref), so it establishes the consumer pattern for the rest of the constellation.Shape
Mirrors the existing
link-check.ymlconsumer pattern in this repo:# <short> <date>comment (no releases onci-workflowsyet).secrets:passes onlyCLAUDE_CODE_OAUTH_TOKENexplicitly (least privilege), notsecrets: inherit.on:+ theGITHUB_TOKENpermission grant; the reusable workflow owns the action pin and safety model.Safety
pull_requestonly → fork PRs receive no secrets and a read-only token, so they are not reviewed by design (no token-exfiltration surface).standardsto be in theCLAUDE_CODE_OAUTH_TOKENorg secret's selected-repositories scope — already added.Defaults
Review prompt / model / max-turns inherit the reusable workflow defaults (
claude-sonnet-4-6, max-turns 75, CLAUDE.md/REVIEW.md-aware prompt). No overrides for the pilot.🤖 Generated with Claude Code