ci: add claude-fix workflow (PMC-119) #40

Closed

David wants to merge 0 commits from chore/claude-fix-workflow into main

David commented

2026-05-18 14:33:00 +02:00

Owner

Adds the claude-fix workflow vendored from a8n-run/claude-fix-sandbox. It is a manually-dispatched Forgejo workflow (Actions UI -> Run workflow) that runs Claude Code against a failing PR: checks out the PR branch, builds failure context, runs claude --bare in headless mode with a restricted allowedTools list, then commits and pushes any changes using a bot PAT so CI re-runs. A [skip claude] commit tag prevents runaway loops.

The workflow has no repo-specific hardcoded values (it derives repo and host from github.repository / github.server_url), so the file is copied unchanged.

Required before first dispatch

The following secrets must be configured under Settings > Actions > Secrets:

ANTHROPIC_API_KEY: from console.anthropic.com (NOT an OAuth subscription token).
CLAUDE_BOT_PAT: a PAT for a bot user account with repo write scope. Required so pushes re-trigger CI (the built-in GITHUB_TOKEN does not).

Closes #PMC-119.

Adds the `claude-fix` workflow vendored from `a8n-run/claude-fix-sandbox`. It is a manually-dispatched Forgejo workflow (Actions UI -> Run workflow) that runs Claude Code against a failing PR: checks out the PR branch, builds failure context, runs `claude --bare` in headless mode with a restricted allowedTools list, then commits and pushes any changes using a bot PAT so CI re-runs. A `[skip claude]` commit tag prevents runaway loops. The workflow has no repo-specific hardcoded values (it derives repo and host from `github.repository` / `github.server_url`), so the file is copied unchanged. ## Required before first dispatch The following secrets must be configured under Settings > Actions > Secrets: - `ANTHROPIC_API_KEY`: from console.anthropic.com (NOT an OAuth subscription token). - `CLAUDE_BOT_PAT`: a PAT for a bot user account with repo write scope. Required so pushes re-trigger CI (the built-in `GITHUB_TOKEN` does not). Closes #PMC-119.

David added 1 commit

2026-05-18 14:33:00 +02:00

ci: add claude-fix workflow

Check / clippy + fmt + tests (pull_request) Failing after 9s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

f19c6125ac

Vendored copy of .forgejo/workflows/claude-fix.yml from the claude-fix-sandbox repo. Provides a manually-dispatched Forgejo workflow that runs Claude Code against a failing PR: checks out the PR branch, builds failure context, runs claude in --bare/headless mode with a restricted allowedTools list, then commits and pushes any changes using a bot PAT so CI re-runs. A [skip claude] commit tag guards against runaway loops.

The workflow has no repo-specific hardcoded values (it derives repo and host from github.repository / github.server_url), so it is copied unchanged. To enable it, ANTHROPIC_API_KEY and CLAUDE_BOT_PAT must be configured under Settings > Actions > Secrets.

#PMC-119 State Done

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>