ci: expand Claude GitHub Action permissions for git operations #2048
+21
−7
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Upgrade Claude's workflow permissions from read-only to write access: - contents: write - enables git rebase, push, and branch management - pull-requests: write - allows PR updates, reviews, and merging - issues: write - enables commenting and label management - checks: read - allows reading CI check results Also update checkout to fetch full git history (fetch-depth: 0) required for rebase operations. This allows Claude to perform common development tasks like rebasing PRs, pushing commits, and managing PR/issue metadata directly from the GitHub Action workflow. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Why
Currently Claude's GitHub Action has read-only permissions, which prevents it from performing useful git operations like rebasing branches, pushing commits, or updating PR metadata. This came up in #2031 (comment) where Claude couldn't rebase a PR when requested.
What Changed
Upgraded workflow permissions from read-only to write access:
Also updated checkout step:
fetch-depth: 0for full git history (required for rebase operations)GITHUB_TOKENfor git operationsAdded documentation with examples of what Claude can now do and how to optionally restrict specific operations using
claude_args.What Claude Can Now Do
With these permissions, Claude can:
--force-with-lease)Testing
The changes are backwards compatible - existing Claude interactions continue to work, but now with expanded capabilities.
[AI-assisted - Claude]