Skip to content

fix: review pull requests from forks - #101

Merged
Troublor merged 1 commit into
mainfrom
gao/ci/fix-action-trigger
Aug 10, 2026
Merged

fix: review pull requests from forks#101
Troublor merged 1 commit into
mainfrom
gao/ci/fix-action-trigger

Conversation

@yunlonggao-mega

Copy link
Copy Markdown
Contributor

Summary

  • Run automatic PR reviews on pull_request_target so organization variables and secrets are available for forked pull requests.
  • Pin checkout to the pull request base SHA so the privileged workflow only loads trusted repository code.
  • Keep the existing App ID input; migrating the deprecated input requires configuring the separate GitHub App client ID.

Test plan

  • PYTHONDONTWRITEBYTECODE=1 python3 .github/actions/claude-pr-review/test_review_pipeline.py
  • npx --yes prettier@3.8.5 --check .github/workflows/claude.yml
  • Parsed the workflow and asserted the trigger, event guard, base SHA checkout, and disabled credential persistence.

@Troublor
Troublor merged commit 8a7a3d8 into main Aug 10, 2026
2 checks passed
@Troublor
Troublor deleted the gao/ci/fix-action-trigger branch August 10, 2026 04:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants