GitHub Actions Workflows — Put Claude Code on Repeated Team Jobs

- uses: anthropics/claude-code-action@v1
  with:
    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
    prompt: "Describe the task you want Claude to perform here."

name: Claude Code Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Review this PR for:
            - Security vulnerabilities
            - Performance issues
            - Code style consistency
            Provide actionable feedback as PR comments.

name: Issue Triage
on:
  issues:
    types: [opened]
 
jobs:
  triage:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      issues: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Analyze this newly filed issue:
 
            Title: ${{ github.event.issue.title }}
            Body: ${{ github.event.issue.body }}
 
            Please do the following:
            1. Classify as bug report, feature request, or question
            2. If reproduction steps or context are missing, post a comment requesting them
            3. Suggest appropriate labels (bug, enhancement, question, needs-info)
            4. Assess urgency (critical, high, medium, low)
 
            Post a triage summary as an issue comment.

name: Analyze Failure
on:
  workflow_run:
    workflows: ["CI"]
    types: [completed]
 
jobs:
  analyze:
    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
      actions: read
    steps:
      - name: Get workflow logs
        id: logs
        uses: actions/github-script@v7
        with:
          script: |
            const logs = await github.rest.actions.downloadWorkflowRunLogs({
              owner: context.repo.owner,
              repo: context.repo.repo,
              run_id: context.payload.workflow_run.id,
            });
            return Buffer.from(logs.data).toString('utf-8').slice(0, 8000);
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Here are the logs from a failed CI workflow:
 
            ${{ steps.logs.outputs.result }}
 
            Please analyze:
            1. What failed first
            2. The most likely root cause
            3. Concrete next steps to fix it
 
            Post the analysis as a comment on the related PR.

permissions:
  contents: read        # read source code
  pull-requests: write  # post PR comments
  issues: write         # post issue comments and apply labels
  # actions: read       # read workflow logs (only when needed)

on:
  pull_request:
    paths:
      - "src/**"
      - "tests/**"
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  review:
    runs-on: ubuntu-latest
    timeout-minutes: 10

## Coding Rules
- TypeScript strict mode required
- All API endpoints must have error handling
- New features require tests
 
## Review Checklist
- Check for SQL injection vectors
- Verify authentication and authorization
- Validate all external input

name: Claude Code CI Tasks
on:
  push:
    branches: [main]
 
jobs:
  analyze:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code
 
      - name: Security Audit
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude -p "Audit the files changed in this push for security vulnerabilities. \
            Focus on: SQL injection, XSS, auth bypasses. \
            Output a markdown summary." \
            --output-format text > security-report.md
 
      - name: Upload Report
        uses: actions/upload-artifact@v4
        with:
          name: security-report
          path: security-report.md

name: Release Notes
on:
  release:
    types: [created]
 
jobs:
  generate-notes:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Full history for commit analysis
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Generate release notes for tag ${{ github.event.release.tag_name }}.
 
            Analyze all commits since the previous tag:
            1. Group changes by category (Features, Bug Fixes, Performance, Documentation)
            2. Write user-facing descriptions (not commit hashes)
            3. Highlight breaking changes with ⚠️ prefix
            4. Include migration steps if needed
 
            Format as GitHub-flavored markdown.
            Update the release body with the generated notes.

name: Multi-Aspect Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        aspect:
          - name: security
            prompt: "Review for OWASP Top 10 vulnerabilities, injection risks, and auth issues"
          - name: performance
            prompt: "Review for N+1 queries, memory leaks, unnecessary re-renders, and heavy computations"
          - name: maintainability
            prompt: "Review for code duplication, complex functions (>20 lines), missing error handling, and unclear naming"
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            You are a ${{ matrix.aspect.name }} specialist.
            ${{ matrix.aspect.prompt }}
 
            Be specific: reference file names and line numbers.
            If no issues found, say "✅ No ${{ matrix.aspect.name }} issues found."

name: Weekly Dependency Check
on:
  schedule:
    - cron: "0 9 * * 1"  # Every Monday at 9 AM
  workflow_dispatch:  # Manual trigger
 
jobs:
  check-deps:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v4
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Check for outdated dependencies in this project:
 
            1. Run `npm outdated` (or equivalent for the package manager used)
            2. For each outdated package, check:
               - Is it a major version bump? (potential breaking changes)
               - Does the changelog mention security fixes?
               - Are there known vulnerabilities? (check `npm audit`)
            3. Create a summary categorized by:
               - 🔴 Security patches (update immediately)
               - 🟡 Minor updates (safe to update)
               - 🟠 Major updates (needs review)
            4. If there are security patches, create a PR with those updates
 
            Be conservative — only auto-update for security patches.
            Major version bumps should only be recommended, not applied.