Claude Code GitHub Action

What it does

• Adds a @claude mention workflow — Claude Code runs in GitHub Actions whenever someone mentions it in an issue or PR
• Reviews diffs, fixes CI failures, answers questions, and implements small changes following your CLAUDE.md conventions
• Progressive permissions: branch pushes, PR writes, and review responses gated by workflow inputs
• Official Anthropic-maintained action — pairs with claude-code-security-review for vulnerability-focused review

When to use it

Best for maintainers who want a codebase-aware review bot on every PR, and for teams automating triage (label an issue and let Claude take a first pass). The shared, auditable surface for collaborators who don't have Claude Code locally.

Getting started

Create .github/workflows/claude.yml:

name: Claude Code
on:
  issue_comment:
    types: [created]
jobs:
  claude:
    uses: anthropics/claude-code-action@v1
    with:
      anthropic_token: ${{ secrets.ANTHROPIC_API_KEY }}

Then mention @claude in any issue or PR.

Things to know

Every @claude run consumes API tokens — cap it with the action's turn/budget inputs for cost control. The workflow's GITHUB_TOKEN scope is what Claude can do; grant contents:write only when pushes are needed. Issue and PR text is untrusted input routed to a model with repo access — keep that in mind on public repos.