GitHub Actions 워크플로우 — 반복 팀 작업에 Claude Code 넣기

- uses: anthropics/claude-code-action@v1
  with:
    anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
    prompt: "여기에 Claude에게 할 작업을 씁니다."

name: Claude Code Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            이 PR을 다음 항목으로 리뷰해 주세요:
            - 보안 취약점
            - 성능 문제
            - 코드 스타일 일관성
            실행 가능한 피드백을 PR 코멘트로 달아주세요.

name: Issue Triage
on:
  issues:
    types: [opened]
 
jobs:
  triage:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      issues: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            방금 등록된 이슈를 분석해 주세요:
 
            제목: ${{ github.event.issue.title }}
            내용: ${{ github.event.issue.body }}
 
            다음을 수행해 주세요:
            1. 버그 리포트, 기능 요청, 질문 중 어느 것인지 판단
            2. 재현 단계나 컨텍스트가 부족하면 추가 정보 요청 코멘트 작성
            3. 적절한 라벨 제안 (bug, enhancement, question, needs-info)
            4. 긴급도 평가 (critical, high, medium, low)
 
            이슈 코멘트로 트리아지 요약을 작성해 주세요.

name: Analyze Failure
on:
  workflow_run:
    workflows: ["CI"]
    types: [completed]
 
jobs:
  analyze:
    if: ${{ github.event.workflow_run.conclusion == 'failure' }}
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write
      actions: read
    steps:
      - name: Get workflow logs
        id: logs
        uses: actions/github-script@v7
        with:
          script: |
            const logs = await github.rest.actions.downloadWorkflowRunLogs({
              owner: context.repo.owner,
              repo: context.repo.repo,
              run_id: context.payload.workflow_run.id,
            });
            return Buffer.from(logs.data).toString('utf-8').slice(0, 8000);
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            아래는 실패한 CI 워크플로우의 로그입니다:
 
            ${{ steps.logs.outputs.result }}
 
            다음을 분석해 주세요:
            1. 가장 먼저 실패한 항목
            2. 가능성 높은 근본 원인
            3. 수정을 위한 구체적인 다음 단계
 
            관련 PR에 분석 결과를 코멘트로 달아주세요.

permissions:
  contents: read        # 코드 읽기
  pull-requests: write  # PR 코멘트 작성
  issues: write         # 이슈 코멘트 및 라벨
  # actions: read       # 워크플로우 로그 읽기 (필요할 때만)

on:
  pull_request:
    paths:
      - "src/**"
      - "tests/**"
 
concurrency:
  group: ${{ github.workflow }}-${{ github.ref }}
  cancel-in-progress: true

jobs:
  review:
    runs-on: ubuntu-latest
    timeout-minutes: 10

## 코딩 규칙
- TypeScript strict 모드 사용
- 모든 API 엔드포인트에 에러 핸들링 필수
- 새 기능에는 반드시 테스트 추가
 
## 리뷰 체크리스트
- SQL 인젝션 가능성 확인
- 인증/인가 처리 확인
- 외부 입력 검증 확인

name: Claude Code CI Tasks
on:
  push:
    branches: [main]
 
jobs:
  analyze:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
 
      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code
 
      - name: Security Audit
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude -p "Audit the files changed in this push for security vulnerabilities. \
            Focus on: SQL injection, XSS, auth bypasses. \
            Output a markdown summary." \
            --output-format text > security-report.md
 
      - name: Upload Report
        uses: actions/upload-artifact@v4
        with:
          name: security-report
          path: security-report.md

name: Release Notes
on:
  release:
    types: [created]
 
jobs:
  generate-notes:
    runs-on: ubuntu-latest
    permissions:
      contents: write
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0  # Full history for commit analysis
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Generate release notes for tag ${{ github.event.release.tag_name }}.
 
            Analyze all commits since the previous tag:
            1. Group changes by category (Features, Bug Fixes, Performance, Documentation)
            2. Write user-facing descriptions (not commit hashes)
            3. Highlight breaking changes with ⚠️ prefix
            4. Include migration steps if needed
 
            Format as GitHub-flavored markdown.
            Update the release body with the generated notes.

name: Multi-Aspect Review
on:
  pull_request:
    types: [opened, synchronize]
 
jobs:
  review:
    runs-on: ubuntu-latest
    strategy:
      matrix:
        aspect:
          - name: security
            prompt: "Review for OWASP Top 10 vulnerabilities, injection risks, and auth issues"
          - name: performance
            prompt: "Review for N+1 queries, memory leaks, unnecessary re-renders, and heavy computations"
          - name: maintainability
            prompt: "Review for code duplication, complex functions (>20 lines), missing error handling, and unclear naming"
    permissions:
      contents: read
      pull-requests: write
    steps:
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            You are a ${{ matrix.aspect.name }} specialist.
            ${{ matrix.aspect.prompt }}
 
            Be specific: reference file names and line numbers.
            If no issues found, say "✅ No ${{ matrix.aspect.name }} issues found."

name: Weekly Dependency Check
on:
  schedule:
    - cron: "0 9 * * 1"  # Every Monday at 9 AM
  workflow_dispatch:  # Manual trigger
 
jobs:
  check-deps:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
    steps:
      - uses: actions/checkout@v4
 
      - uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
          prompt: |
            Check for outdated dependencies in this project:
 
            1. Run `npm outdated` (or equivalent for the package manager used)
            2. For each outdated package, check:
               - Is it a major version bump? (potential breaking changes)
               - Does the changelog mention security fixes?
               - Are there known vulnerabilities? (check `npm audit`)
            3. Create a summary categorized by:
               - 🔴 Security patches (update immediately)
               - 🟡 Minor updates (safe to update)
               - 🟠 Major updates (needs review)
            4. If there are security patches, create a PR with those updates
 
            Be conservative — only auto-update for security patches.
            Major version bumps should only be recommended, not applied.