Skip to content

Commit 7b69774

Browse files
chargomeclaude
andauthored
chore(ci): Allow triage action to run on issues from external users (#19701)
The claude-code-action OIDC token exchange verifies that the triggering GitHub actor has write access to the repository. When an external user opens an issue, they are the actor and don't have write access, causing the action to fail with a 401 error. Pass an explicit github_token and set allowed_non_write_users to '*' so the action skips the write-access check. This is safe because the workflow's GITHUB_TOKEN only has read permissions, and the existing prompt injection detection script guards against malicious issue content before any triage logic (including Linear writes) executes. Following an example from anthropic [here](https://github.com/anthropics/claude-code-action/blob/3428ca8991d4611b464661a70b0725ae459c894d/examples/issue-triage.yml#L28) Closes #19702 (added automatically) Co-authored-by: Claude <noreply@anthropic.com>
1 parent 5651be2 commit 7b69774

File tree

1 file changed

+2
-0
lines changed

1 file changed

+2
-0
lines changed

.github/workflows/triage-issue.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -57,6 +57,8 @@ jobs:
5757
uses: anthropics/claude-code-action@v1
5858
with:
5959
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
60+
github_token: ${{ secrets.GITHUB_TOKEN }}
61+
allowed_non_write_users: '*'
6062
settings: |
6163
{
6264
"env": {

0 commit comments

Comments
 (0)