review: use the job token instead of the Claude app - #46
Closed
rubas-agent[bot] wants to merge 1 commit into
Closed
rubas-agent[bot] wants to merge 1 commit into
rubas-agent[bot] wants to merge 1 commit into
Conversation
…token The Claude GitHub App is no longer installed on this repo, so the action's OIDC exchange for an app token failed with 401 and the review check went red. rubas/ci code-review.yml passes github.token and allows the rubas-agent bot; this copy now does the same.
Contributor
Author
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
The
Claude Reviewcheck fails on every PR since 2026-09-28:This repo is public, so it cannot call the private
rubas/cireview workflow and keeps its own copy. That copy letsclaude-code-actionswap an OIDC token for a Claude GitHub App token. The Claude app is no longer installed on this repo, so the swap fails. On 2026-09-26 the same step still worked.The shared workflow in
rubas/cidoes not use the app. It passes the job token asgithub_tokenand listsrubas-agentinallowed_bots, because the action refuses a bot actor otherwise. This PR makes the same change in all three attempt steps, and fixes the two comments that still named the app token.The PR runs its own new workflow, so its
Claude Reviewcheck is the test.