You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Review
This PR adds a GitHub Actions workflow for automated issue triage using Claude and a helper shell script for editing issue labels. The shell script is well-structured with proper input validation. However, the workflow has several path and configuration bugs that will prevent it from working correctly.
Duplicate checkout steps (.github/workflows/claude-issue-triage.yaml lines 15-21): Two actions/checkout steps (v6 with explicit settings, then v4 with defaults). The second overrides the first, discarding fetch-depth and persist-credentials configuration.
Incorrect script path (.github/workflows/claude-issue-triage.yaml line 26, line 71): References ./scripts/edit-issue-labels.sh but the file is at .github/scripts/edit-issue-label.sh (wrong directory prefix and singular vs plural filename). This breaks both the allowedTools permission and the prompt instructions.
Incorrect info.csv path (.github/workflows/claude-issue-triage.yaml line 57): Uses ../../internal/plugins/info.csv (relative to the workflow file location) but Claude Code runs from the repo root, so the path should be internal/plugins/info.csv.
Review
This PR adds a GitHub Actions workflow for automated issue triage using Claude, along with a helper shell script for editing issue labels. Two bugs will prevent the workflow from functioning.
Missing contents: read permission (claude-issue-triage.yaml L9-11): The job explicitly declares permissions, which causes all unspecified permissions to default to none. actions/checkout@v6 requires contents: read to clone the repo — the checkout step will fail without it.
Script not executable (edit-issue-label.sh L1): The file mode is 100644 (not executable). The workflow instructs Claude to invoke the script directly, which will fail with "Permission denied". Needs chmod +x.
Review
Adds a GitHub Actions workflow for automated issue triage using Claude Code Action, along with a helper shell script for editing issue labels. The workflow has well-scoped permissions (contents: read, issues: write), constrained allowed tools, and anti-injection security constraints. The shell script properly validates the issue number from the event payload and validates labels against the repo before applying them.
Review
Adds a GitHub Actions workflow for automated issue triage using Claude Code Action, backed by a helper shell script for label management. The script validates inputs (numeric issue number, labels that exist in the repo) and the workflow properly scopes permissions and restricts allowed tools.
Review
Adds a GitHub Actions workflow for AI-powered issue triage with a helper shell script for label management. The shell script properly validates inputs (numeric issue number, label existence checks) and uses array-based command construction to avoid injection. The workflow scopes permissions appropriately and restricts allowed tools to specific gh commands.
Review
Adds a GitHub Actions workflow for automated issue triage via claude-code-action and a helper shell script for label management. Permissions are appropriately scoped, tool access is restricted to specific gh subcommands and the label script, and the prompt includes prompt injection mitigations. No Go code changes.
LGTM
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
No description provided.