Skip to content

[IMPROVED] PurgeEx only loads within subject range #380

[IMPROVED] PurgeEx only loads within subject range

[IMPROVED] PurgeEx only loads within subject range #380

Workflow file for this run

name: Claude Code
# GITHUB_TOKEN is neutered — all GitHub API access uses the App token instead.
permissions: {}
on:
issue_comment:
types: [created]
pull_request_review_comment:
types: [created]
pull_request_target:
types: [opened, reopened]
jobs:
claude:

Check failure on line 15 in .github/workflows/claude.yml

View workflow run for this annotation

GitHub Actions / Claude Code

Invalid workflow file

The workflow is not valid. .github/workflows/claude.yml (Line: 15, Col: 3): Error calling workflow 'synadia-io/ai-workflows/.github/workflows/claude.yml@v2'. The workflow is requesting 'actions: read, contents: read', but is only allowed 'actions: none, contents: none'. .github/workflows/claude.yml (Line: 15, Col: 3): Error calling workflow 'synadia-io/ai-workflows/.github/workflows/claude.yml@v2'. The nested job 'claude-interactive' is requesting 'actions: read, contents: read', but is only allowed 'actions: none, contents: none'.
name: Claude Review
uses: synadia-io/ai-workflows/.github/workflows/claude.yml@v2
if: contains(
fromJson('["OWNER","MEMBER","COLLABORATOR"]'),
github.event.comment.author_association || github.event.pull_request.author_association
)
with:
gh_app_id: ${{ vars.CLAUDE_GH_APP_ID }}
checkout_mode: "base"
review_focus: |
Additionally focus on:
- Performance implications (hot paths, allocations, lock contention)
- Concurrency safety (goroutine leaks, race conditions, deadlocks)
- Raft consensus and JetStream clustering correctness
- Security boundaries (authentication, authorization, TLS handling)
secrets:
claude_oauth_token: ${{ secrets.CLAUDE_OAUTH_TOKEN }}
gh_app_private_key: ${{ secrets.CLAUDE_GH_APP_PRIVATE_KEY }}