fix(scrub-sensitive-data-from-sentry): scrubs sensitive datat from se… #751
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| # Claude Code Review | |
| # | |
| # Automated code review on pull requests using the official Anthropic | |
| # code-review plugin. Findings are verified by the plugin's review agents | |
| # and posted as inline comments on the PR diff. | |
| # | |
| # Triggered on: PR opened, marked ready for review, or pushed to | |
| # Requirements: ANTHROPIC_API_KEY secret must be configured | |
| # | |
| # Notes: | |
| # - Dependabot PRs are excluded — they get their own review via | |
| # claude-dependabot.yml | |
| # - Sentry (Seer) bot PRs are reviewed; the action's non-human-actor guard | |
| # is opened for them via allowed_bots | |
| # - Draft PRs are skipped; the review runs when the PR is marked ready | |
| # - A new push cancels any in-progress review of the same PR | |
| name: Claude Code Review | |
| on: | |
| pull_request: | |
| types: [opened, synchronize, ready_for_review] | |
| concurrency: | |
| group: claude-review-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| issues: read | |
| id-token: write | |
| jobs: | |
| review: | |
| # Fork PRs can't get an OIDC token (GitHub omits ACTIONS_ID_TOKEN_REQUEST_URL | |
| # for fork-originated pull_request events), so the review is skipped for them. | |
| if: >- | |
| github.event.pull_request.head.repo.full_name == github.repository | |
| && github.actor != 'dependabot[bot]' | |
| && !github.event.pull_request.draft | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| steps: | |
| - name: Checkout repository | |
| uses: actions/checkout@v6 | |
| with: | |
| fetch-depth: 0 | |
| - name: Run Claude Code Review | |
| uses: anthropics/claude-code-action@v1 | |
| with: | |
| anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} | |
| allowed_bots: "sentry[bot]" | |
| plugin_marketplaces: "https://github.com/anthropics/claude-code.git" | |
| plugins: "code-review@claude-code-plugins" | |
| prompt: "/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }} --comment" | |
| claude_args: | | |
| --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(git log:*),Bash(git show:*),Bash(git diff:*),Bash(git status:*),Bash(git branch:*),Bash(gh pr view:*),Bash(gh pr diff:*),Bash(gh pr comment:*),Bash(gh pr review:*),Bash(gh api:*),Read,Grep,Glob,Task" |