Skip to content

Skip Claude review for fork PRs #14

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
jonathangreen merged 2 commits into from
Jun 11, 2026
Merged

Skip Claude review for fork PRs #14

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
6b58af0
Skip Claude review for fork PRs
jonathangreen Jun 11, 2026
43a25ac
Document that fork PRs are skipped in the README
jonathangreen Jun 11, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 6 additions & 1 deletion .github/workflows/claude-review.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,7 +20,12 @@ jobs:
review:
name: Claude Review
runs-on: ubuntu-latest
if: github.event.pull_request.user.login != 'dependabot[bot]'
# Fork PRs run with a read-only token and no access to secrets, so the
# review can't authenticate. Skip them (along with dependabot) until fork
# support is added.
if: >-
github.event.pull_request.head.repo.full_name == github.repository &&
github.event.pull_request.user.login != 'dependabot[bot]'
permissions:
contents: read
pull-requests: write
Expand Down
6 changes: 4 additions & 2 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -20,8 +20,10 @@ Pin to `vX.Y.Z` if you need an immutable reference.
### `claude-review`

Runs Claude Code as a PR reviewer on `pull_request` events. The workflow owns
its trigger filter (skips Dependabot), concurrency group, permissions, and
review prompt — consumers just dispatch.
its trigger filter (skips Dependabot and PRs from forks), concurrency group,
permissions, and review prompt — consumers just dispatch. Fork PRs are skipped
because they run with a read-only token and no access to secrets, so the review
can't authenticate.

```yaml
name: Claude PR Review
Expand Down