Add Claude Code GitHub Workflow

[krishagel]

🤖 Installing Claude Code GitHub App

This PR adds a GitHub Actions workflow that enables Claude Code integration in our repository.

What is Claude Code?

Claude Code is an AI coding agent that can help with:

• Bug fixes and improvements
• Documentation updates
• Implementing new features
• Code reviews and suggestions
• Writing tests
• And more!

How it works

Once this PR is merged, we'll be able to interact with Claude by mentioning @claude in a pull request or issue comment.
Once the workflow is triggered, Claude will analyze the comment and surrounding context, and execute on the request in a GitHub action.

Important Notes

• This workflow won't take effect until this PR is merged
• @claude mentions won't work until after the merge is complete
• The workflow runs automatically whenever Claude is mentioned in PR or issue comments
• Claude gets access to the entire PR or issue context including files, diffs, and previous comments

Security

• Our Anthropic API key is securely stored as a GitHub Actions secret
• Only users with write access to the repository can trigger the workflow
• All Claude runs are stored in the GitHub Actions run history
• Claude's default tools are limited to reading/writing files and interacting with our repo by creating comments, branches, and commits.
• We can add more allowed tools by adding them to the workflow file like:

allowed_tools: Bash(npm install),Bash(npm run build),Bash(npm run lint),Bash(npm run test)

There's more information in the Claude Code action repo.

After merging this PR, let's try mentioning @claude in a comment on any PR to get started!

[claude]

PR Review: Add Claude Code GitHub Workflow

Summary

This PR adds two GitHub Actions workflows to integrate Claude Code into the repository. The implementation is well-structured and secure, with only minor suggestions for improvement.

Code Quality and Best Practices

Strengths

1. Security-conscious design with properly scoped permissions and OAuth token storage
2. Clean workflow structure with appropriate trigger events
3. Good documentation in the PR description

Suggestions for Improvement

1. Align with Repository Philosophy
The current review prompt is generic. Consider aligning it with Geoffrey's principles from CLAUDE.md to make reviews more contextually relevant.

2. Consider Adding bun Commands
Per CLAUDE.md guidelines, the project uses bun instead of node. Consider adding bun to allowed tools.

3. Path Filtering Precision
The commented path filter could be tailored to actual code locations to prevent unnecessary reviews on non-code changes.

4. Minor Redundancy
The additional_permissions setting for actions: read is already in the permissions block and can be removed from claude.yml.

Performance Considerations

Excellent - fetch-depth: 1 minimizes checkout time, conditional execution prevents unnecessary runs, and scoped triggers reduce API consumption.

Security Concerns

No issues found - OAuth token properly secured, minimal required permissions, no exposure of sensitive data.

Test Coverage

Not applicable for CI infrastructure. Recommendation: After merge, test with a sample @claude mention to validate the workflow.

Architecture Alignment

Fits Geoffrey's principles - follows Scaffolding over Model by providing infrastructure for AI orchestration and supports the three-tier architecture.

Recommendation

Approve with minor improvements. The core implementation is solid and secure.

Next Steps After Merging

• Test @claude mention on an issue or PR
• Validate automatic PR reviews work as expected
• Consider documenting this integration in docs/development-workflows.md