Workflows con GitHub Actions — Usa Claude Code en Tareas Repetidas del Equipo

- uses: anthropics/claude-code-action@v1
  with:
    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
    prompt: "Describe aquí la tarea que quieres que realice Claude."

name: Claude Code Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Revisa este PR teniendo en cuenta:
            - Vulnerabilidades de seguridad
            - Problemas de rendimiento
            - Consistencia del estilo de código
            Proporciona feedback concreto y accionable como comentarios en el PR.

name: Issue Triage
on:
  issues:
    types: [opened]
 
jobs:
  triage:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      issues: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Analiza este issue recién registrado:
 
            Título: ${{ github.event.issue.title }}
            Contenido: ${{ github.event.issue.body }}
 
            Por favor realiza lo siguiente:
            1. Clasifícalo como reporte de bug, solicitud de funcionalidad o pregunta
            2. Si faltan pasos de reproducción o contexto, publica un comentario solicitándolos
            3. Sugiere etiquetas apropiadas (bug, enhancement, question, needs-info)
            4. Evalúa la urgencia (critical, high, medium, low)
 
            Publica un resumen del triage como comentario en el issue.

name: Analyze Failure
on:
  workflow_run:
    workflows: ["CI"]
    types: [completed]
 
jobs:
  analyze:
    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
      actions: read
    steps:
      - name: Obtener logs del workflow
        id: logs
        uses: actions/github-script@v7
        with:
          script: |
            const logs = await github.rest.actions.downloadWorkflowRunLogs({
              owner: context.repo.owner,
              repo: context.repo.repo,
              run_id: context.payload.workflow_run.id,
            });
            return Buffer.from(logs.data).toString('utf-8').slice(0, 8000);
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Aquí están los logs del workflow de CI que ha fallado:
 
            ${{ steps.logs.outputs.result }}
 
            Por favor analiza:
            1. Qué falló primero
            2. La causa raíz más probable
            3. Próximos pasos concretos para solucionarlo
 
            Publica el análisis como comentario en el PR relacionado.

permissions:
  contents: read        # leer código fuente
  pull-requests: write  # publicar comentarios en PRs
  issues: write         # publicar comentarios y aplicar etiquetas en issues
  # actions: read       # leer logs de workflows (solo cuando sea necesario)

on:
  pull_request:
    paths:
      - "src/**"
      - "tests/**"
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  review:
    runs-on: ubuntu-latest
    timeout-minutes: 10

## Reglas de Código
- TypeScript en modo strict obligatorio
- Todos los endpoints de API deben tener gestión de errores
- Las nuevas funcionalidades requieren tests
 
## Checklist de Revisión
- Verificar vectores de inyección SQL
- Comprobar autenticación y autorización
- Validar todos los inputs externos

name: Claude Code CI Tasks
on:
  push:
    branches: [main]
 
jobs:
  analyze:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code
 
      - name: Security Audit
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude -p "Audit the files changed in this push for security vulnerabilities. \
            Focus on: SQL injection, XSS, auth bypasses. \
            Output a markdown summary." \
            --output-format text > security-report.md
 
      - name: Upload Report
        uses: actions/upload-artifact@v4
        with:
          name: security-report
          path: security-report.md

name: Release Notes
on:
  release:
    types: [created]
 
jobs:
  generate-notes:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Full history for commit analysis
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Generate release notes for tag ${{ github.event.release.tag_name }}.
 
            Analyze all commits since the previous tag:
            1. Group changes by category (Features, Bug Fixes, Performance, Documentation)
            2. Write user-facing descriptions (not commit hashes)
            3. Highlight breaking changes with ⚠️ prefix
            4. Include migration steps if needed
 
            Format as GitHub-flavored markdown.
            Update the release body with the generated notes.

name: Multi-Aspect Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        aspect:
          - name: security
            prompt: "Review for OWASP Top 10 vulnerabilities, injection risks, and auth issues"
          - name: performance
            prompt: "Review for N+1 queries, memory leaks, unnecessary re-renders, and heavy computations"
          - name: maintainability
            prompt: "Review for code duplication, complex functions (>20 lines), missing error handling, and unclear naming"
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            You are a ${{ matrix.aspect.name }} specialist.
            ${{ matrix.aspect.prompt }}
 
            Be specific: reference file names and line numbers.
            If no issues found, say "✅ No ${{ matrix.aspect.name }} issues found."

name: Weekly Dependency Check
on:
  schedule:
    - cron: "0 9 * * 1"  # Every Monday at 9 AM
  workflow_dispatch:  # Manual trigger
 
jobs:
  check-deps:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v4
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Check for outdated dependencies in this project:
 
            1. Run `npm outdated` (or equivalent for the package manager used)
            2. For each outdated package, check:
               - Is it a major version bump? (potential breaking changes)
               - Does the changelog mention security fixes?
               - Are there known vulnerabilities? (check `npm audit`)
            3. Create a summary categorized by:
               - 🔴 Security patches (update immediately)
               - 🟡 Minor updates (safe to update)
               - 🟠 Major updates (needs review)
            4. If there are security patches, create a PR with those updates
 
            Be conservative — only auto-update for security patches.
            Major version bumps should only be recommended, not applied.