Tweak bot PR review prompts

[ValentaTomas]

Note

Adds BugBot config and tightens Claude Code Review workflow to trigger only on opened PRs with stricter, inline-comment guidance using gh api.

• CI/Workflows:
  • Update /.github/workflows/claude-code-review.yml to trigger only on pull_request: [opened].
  • Expand review prompt with stricter guidance: avoid summaries, reduce false positives, and post issues only as inline comments using gh api with the provided payload format.
  • Adjust claude_args to allow gh api while keeping other gh commands.
• Tooling/Config:
  • Add /.cursor/BUGBOT.md with concise rules for PR descriptions and reviews.

^{Written by Cursor Bugbot for commit b49f9a7. This will update automatically on new commits. Configure here.}

[ValentaTomas]

• The Claude review test seems to fail because of the difference in the workflows with main
• The integration test failure is a flake

[cursor]

Bug: Forbidden Action: Permission Mismatch

The workflow instructs Claude to post inline comments using gh api to create PR review comments, but the permissions block only grants pull-requests: read. Posting comments via the GitHub API requires pull-requests: write permission, causing the workflow to fail with a 403 Forbidden error when attempting to post comments.

.github/workflows/claude-code-review.yml#L11-L16

infra/.github/workflows/claude-code-review.yml

Lines 11 to 16 in c919c3a

	runs-on: ubuntu-latest
	permissions:
	contents: read
	pull-requests: read
	issues: read
	id-token: write

 

---

[ValentaTomas]

Bug: Forbidden Action: Permission Mismatch

The workflow instructs Claude to post inline comments using gh api to create PR review comments, but the permissions block only grants pull-requests: read. Posting comments via the GitHub API requires pull-requests: write permission, causing the workflow to fail with a 403 Forbidden error when attempting to post comments.

.github/workflows/claude-code-review.yml#L11-L16

infra/.github/workflows/claude-code-review.yml

Lines 11 to 16 in c919c3a

	runs-on: ubuntu-latest
	permissions:
	contents: read
	pull-requests: read
	issues: read
	id-token: write

 

Previously, it was able to post normal comments with these permissions, so I think the permissions are granted by the Claude GH App.

[jakubno]

Can we merge this soon, claude is suuuuuper annoying

[cursor]

Bug: API Comments: Permissions Denied

The workflow instructs Claude to post inline PR comments using gh api to create review comments, but the permissions only grant pull-requests: read. Creating PR review comments via the GitHub API requires pull-requests: write permission, causing the workflow to fail with a 403 Forbidden error when attempting to post comments.