Commit 7b69774
chore(ci): Allow triage action to run on issues from external users (#19701)
The claude-code-action OIDC token exchange verifies that the triggering
GitHub actor has write access to the repository. When an external user
opens an issue, they are the actor and don't have write access, causing
the action to fail with a 401 error.
Pass an explicit github_token and set allowed_non_write_users to '*' so
the action skips the write-access check. This is safe because the
workflow's GITHUB_TOKEN only has read permissions, and the existing
prompt injection detection script guards against malicious issue content
before any triage logic (including Linear writes) executes.
Following an example from anthropic
[here](https://github.com/anthropics/claude-code-action/blob/3428ca8991d4611b464661a70b0725ae459c894d/examples/issue-triage.yml#L28)
Closes #19702 (added automatically)
Co-authored-by: Claude <noreply@anthropic.com>1 parent 5651be2 commit 7b69774
1 file changed
+2
-0
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
57 | 57 | | |
58 | 58 | | |
59 | 59 | | |
| 60 | + | |
| 61 | + | |
60 | 62 | | |
61 | 63 | | |
62 | 64 | | |
| |||
0 commit comments