Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion .github/workflows/claude-code-review.yml
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ jobs:

- name: Run Claude Code Review (agentic)
id: claude-review
uses: anthropics/claude-code-action@558b1d6cab4085c7753fe402c10bef0fbb92ac7a # v1
uses: anthropics/claude-code-action@be7b93b1907a4abad570368f3c74b6fe3807510b # v1

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Pin the action to the advertised digest

This Renovate dependency update advertises anthropics/claude-code-action changing from 558b1d6 to e0cf66d, but the workflow actually runs be7b93b1907a4abad570368f3c74b6fe3807510b. In the dependency-review/automerge path, maintainers would therefore approve the comparison for one revision while deploying a different, unreviewed revision; pin this line to e0cf66d1d257526b5d07f141838c338921cb8455 or regenerate the PR metadata for be7b93b. Fresh evidence versus the earlier comments is that commit 7abd93f now advertises e0cf66d, while its changed workflow line contains be7b93b.

Useful? React with πŸ‘Β / πŸ‘Ž.

continue-on-error: true
with:
claude_code_oauth_token: ${{ env.CLAUDE_CODE_OAUTH_TOKEN }}
Expand Down
Loading