Add Claude Code GitHub Action

[don-petry]

Summary

• Adds Claude Code GitHub Action workflow for automated PR reviews
• Triggers on PR open/sync and when @claude is mentioned in comments
• Requires ANTHROPIC_API_KEY secret to be configured in repo settings

Setup Required

1. Add ANTHROPIC_API_KEY as a repository secret (Settings → Secrets and variables → Actions)

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated internal automation and development infrastructure to improve code quality and review processes.

[coderabbitai]

Warning

Rate limit exceeded

@don-petry has exceeded the limit for the number of commits that can be reviewed per hour. Please wait 2 minutes and 30 seconds before requesting another review.

Your organization is not enrolled in usage-based pricing. Contact your admin to enable usage-based pricing to continue reviews beyond the rate limit, or try again in 2 minutes and 30 seconds.

⌛ How to resolve this issue?

After the wait time has elapsed, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

We recommend that you space out your commits to avoid hitting the rate limit.

🚦 How do rate limits work?

CodeRabbit enforces hourly rate limits for each developer per organization.

Our paid plans have higher rate limits than the trial, open-source and free plans. In all cases, we re-allow further reviews after a brief timeout.

Please see our FAQ for further information.

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: 693b7828-5bfd-46a7-a87b-145af97bd346

📥 Commits

Reviewing files that changed from the base of the PR and between 275cdc8 and 0941066.

📒 Files selected for processing (1)

• .github/workflows/claude.yml

📝 Walkthrough

Walkthrough

Adds a new GitHub Actions workflow file that automatically executes the Claude Code action on pull request events and issue comments containing @claude, authenticating via the Anthropic API using a stored secret.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow .github/workflows/claude.yml	New workflow triggered on pull requests and issue comments, executing the Claude Code action with Anthropic API authentication for automated code analysis.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title accurately and concisely describes the main change: adding a new GitHub Actions workflow for Claude Code integration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch add-claude-code-action

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (3)

.github/workflows/claude.yml (3)

11-13: Restrict issue_comment trigger to PR comments only.

The condition allows @claude mentions on regular issues (not PRs) to trigger the workflow. Since claude-code-action operates on pull requests, invoking it from a non-PR issue will likely fail or produce confusing behavior.

Add a check for github.event.issue.pull_request to ensure the comment is on a PR:

🔧 Proposed fix

     if: |
       (github.event_name == 'pull_request') ||
-      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude'))
+      (github.event_name == 'issue_comment' && 
+       github.event.issue.pull_request && 
+       contains(github.event.comment.body, '@claude'))

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/claude.yml around lines 11 - 13, The workflow's if
condition allows '@claude' mentions on regular issues; change the issue_comment
branch to only match PR comments by adding a check for
github.event.issue.pull_request. Concretely, keep the existing
(github.event_name == 'pull_request') branch and modify the (github.event_name
== 'issue_comment' && contains(github.event.comment.body, '@claude')) branch to
also require github.event.issue.pull_request so that
contains(github.event.comment.body, '@claude') is evaluated only for comments on
pull requests.

---

3-7: Consider potential interaction with CodeRabbit auto-reply.

The repository has CodeRabbit configured with chat.auto_reply: true. Both workflows trigger on PR events and comments. While unlikely, if Claude's comments inadvertently trigger CodeRabbit (or vice versa with @claude mentions), you could see unintended back-and-forth.

Consider documenting this behavior or coordinating with CodeRabbit's path_filters if issues arise. Currently CodeRabbit excludes .claude/** paths from review, which helps avoid some overlap.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/claude.yml around lines 3 - 7, This workflow triggers on
the pull_request and issue_comment events (the on: pull_request and on:
issue_comment blocks) while CodeRabbit is configured with chat.auto_reply: true,
which can cause accidental back-and-forth; fix by either documenting the
potential interaction (add a short note in the README or CONTRIBUTING about the
claude workflow and CodeRabbit auto_reply) or by coordinating with CodeRabbit
configuration to add path_filters that exclude this workflow (ensure CodeRabbit
excludes the .github/workflows/claude.yml or the .claude/** paths already
mentioned), and mention the change to avoid overlapping triggers.

---

19-23: Add timeout-minutes to prevent jobs from consuming excessive runner minutes.

The action and parameter names are correct. However, without a timeout, hung or stalled Claude operations could consume runner minutes indefinitely. GitHub's default job timeout is 6 hours, which is excessive for this workflow.

🔧 Proposed fix

    steps:
      - name: Run Claude Code
        uses: anthropics/claude-code-action@v1
+       timeout-minutes: 30
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In @.github/workflows/claude.yml around lines 19 - 23, The workflow lacks a
job-level timeout, so add a timeout-minutes value to the job that contains the
"Run Claude Code" step to prevent runaway runner usage; locate the job object
that includes the step using the anthropics/claude-code-action@v1 step and add a
timeout-minutes (e.g., 10) property at that job level to enforce a maximum
runtime while leaving the existing anthropic_api_key input unchanged.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In @.github/workflows/claude.yml:
- Around line 11-13: The workflow's if condition allows '@claude' mentions on
regular issues; change the issue_comment branch to only match PR comments by
adding a check for github.event.issue.pull_request. Concretely, keep the
existing (github.event_name == 'pull_request') branch and modify the
(github.event_name == 'issue_comment' && contains(github.event.comment.body,
'@claude')) branch to also require github.event.issue.pull_request so that
contains(github.event.comment.body, '@claude') is evaluated only for comments on
pull requests.
- Around line 3-7: This workflow triggers on the pull_request and issue_comment
events (the on: pull_request and on: issue_comment blocks) while CodeRabbit is
configured with chat.auto_reply: true, which can cause accidental
back-and-forth; fix by either documenting the potential interaction (add a short
note in the README or CONTRIBUTING about the claude workflow and CodeRabbit
auto_reply) or by coordinating with CodeRabbit configuration to add path_filters
that exclude this workflow (ensure CodeRabbit excludes the
.github/workflows/claude.yml or the .claude/** paths already mentioned), and
mention the change to avoid overlapping triggers.
- Around line 19-23: The workflow lacks a job-level timeout, so add a
timeout-minutes value to the job that contains the "Run Claude Code" step to
prevent runaway runner usage; locate the job object that includes the step using
the anthropics/claude-code-action@v1 step and add a timeout-minutes (e.g., 10)
property at that job level to enforce a maximum runtime while leaving the
existing anthropic_api_key input unchanged.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

Run ID: f2bd2c28-ca9a-4c27-a428-555245f75fed

📥 Commits

Reviewing files that changed from the base of the PR and between ce7fb14 and 275cdc8.

📒 Files selected for processing (1)

• .github/workflows/claude.yml

[Copilot]

Pull request overview

Adds a GitHub Actions workflow to run the Claude Code action for automated PR review activity, triggered on PR lifecycle events and on @claude mentions in comments.

Changes:

• Introduces .github/workflows/claude.yml workflow triggered on pull_request (opened/reopened/synchronize) and issue_comment (created).
• Configures a single job to run anthropics/claude-code-action using the ANTHROPIC_API_KEY repository secret.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud