From 8816f8553b0e8c923b52bdf4a6f33fda3853c259 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kacper=20Miko=C5=82ajczak?= Date: Mon, 25 May 2026 16:37:21 +0200 Subject: [PATCH 1/2] Use run-claude-action composite in claude-review.yml Replaces the two direct anthropics/claude-code-action invocations (code review and docs review) with the shared composite at Expensify/GitHub-Actions/.github/actions/run-claude-action. The composite pins the upstream SHA once and applies the common defaults (model, display_report, allowed_non_write_users); caller-specific claude_args (allowedTools, json-schema) stay in this workflow. Net behaviour is unchanged: same upstream SHA, same model, same defaults. --- .github/workflows/claude-review.yml | 10 ++-------- 1 file changed, 2 insertions(+), 8 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index ff4ff643644e..907f7345959f 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -87,15 +87,12 @@ jobs: - name: Run Claude Code (code) id: code-review if: steps.filter.outputs.code == 'true' - uses: anthropics/claude-code-action@ba026a3e56b9f646ae3b1be02dd9c0812aa2f8ae # v1.0.86 + uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@a7c05c4cf02c24d625101e9c30295c5a837cd84a with: - display_report: "true" anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} - allowed_non_write_users: "*" prompt: "/review-code-pr REPO: ${{ github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }}" claude_args: | - --model claude-opus-4-6 --allowedTools "Task,Glob,Grep,Read,Bash(gh pr diff:*),Bash(gh pr view:*),Bash(check-compiler.sh:*)" --json-schema '${{ steps.toolkit.outputs.schema_json }}' - name: Post code review results @@ -122,15 +119,12 @@ jobs: - name: Run Claude Code (docs) if: steps.filter.outputs.docs == 'true' - uses: anthropics/claude-code-action@ba026a3e56b9f646ae3b1be02dd9c0812aa2f8ae # v1.0.86 + uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@a7c05c4cf02c24d625101e9c30295c5a837cd84a with: - display_report: "true" anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} - allowed_non_write_users: "*" prompt: "/review-helpdot-pr REPO: ${{ github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }}" claude_args: | - --model claude-opus-4-6 --allowedTools "Task,Glob,Grep,Read,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),mcp__github_inline_comment__create_inline_comment" - name: Remove in-progress indicator From 7ab730b18bdab0ae57ac3b5fc9dbcc27990b7c93 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Kacper=20Miko=C5=82ajczak?= Date: Mon, 25 May 2026 16:47:07 +0200 Subject: [PATCH 2/2] Pass --model claude-opus-4-6 via claude_args and bump composite pin The composite no longer injects --model. App opts into Opus by passing --model claude-opus-4-6 in claude_args for both the code-review and docs-review invocations - matching the model App used before this PR. --- .github/workflows/claude-review.yml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 907f7345959f..7bd9a84b6b1b 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -87,12 +87,13 @@ jobs: - name: Run Claude Code (code) id: code-review if: steps.filter.outputs.code == 'true' - uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@a7c05c4cf02c24d625101e9c30295c5a837cd84a + uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@594081dca9e97739085087497164a0af7e3b1844 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} prompt: "/review-code-pr REPO: ${{ github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }}" claude_args: | + --model claude-opus-4-6 --allowedTools "Task,Glob,Grep,Read,Bash(gh pr diff:*),Bash(gh pr view:*),Bash(check-compiler.sh:*)" --json-schema '${{ steps.toolkit.outputs.schema_json }}' - name: Post code review results @@ -119,12 +120,13 @@ jobs: - name: Run Claude Code (docs) if: steps.filter.outputs.docs == 'true' - uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@a7c05c4cf02c24d625101e9c30295c5a837cd84a + uses: Expensify/GitHub-Actions/.github/actions/run-claude-action@594081dca9e97739085087497164a0af7e3b1844 with: anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }} github_token: ${{ secrets.GITHUB_TOKEN }} prompt: "/review-helpdot-pr REPO: ${{ github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }}" claude_args: | + --model claude-opus-4-6 --allowedTools "Task,Glob,Grep,Read,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),mcp__github_inline_comment__create_inline_comment" - name: Remove in-progress indicator