Skip to content

ci: replace Code Rabbit with Claude auto-review workflow#21

Merged
jrenaldi79 merged 3 commits intomainfrom
enhance-review-workflow
Mar 25, 2026
Merged

ci: replace Code Rabbit with Claude auto-review workflow#21
jrenaldi79 merged 3 commits intomainfrom
enhance-review-workflow

Conversation

@jrenaldi79
Copy link
Copy Markdown
Owner

@jrenaldi79 jrenaldi79 commented Mar 25, 2026

Summary

  • Split single claude job into two: auto-review (automatic on PR events) and claude-assist (@claude mentions)
  • Added pull_request trigger for automatic reviews on open/push/ready_for_review
  • Draft PRs are skipped in auto-review
  • Bumped contents permission to write so Claude can push suggested fixes

Plugin research findings

Analyzed all plugins from both Anthropic marketplaces before finalizing:

  • Kept pr-review-toolkit: 6-agent review suite (code-reviewer, code-simplifier, comment-analyzer, pr-test-analyzer, silent-failure-hunter, type-design-analyzer)
  • Dropped code-review: Overlaps with pr-review-toolkit (both have a code-reviewer agent)
  • Dropped security-guidance: PreToolUse hook that only fires when Claude edits files locally. In a GitHub Actions context, Claude reviews diffs, not edits files, so the hook never triggers.
  • Dropped semgrep: Does not exist in either marketplace repo
  • Dropped second marketplace (claude-plugins-official): Not needed since all kept plugins are in claude-code-plugins

Test plan

  • Verify workflow syntax is valid (YAML parses correctly)
  • Open a test PR to confirm auto-review job triggers
  • Comment @claude on an issue to confirm claude-assist job triggers
  • Verify draft PRs do not trigger auto-review

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Enhanced automated pull request review workflow to trigger on opened, synchronized, and ready-for-review events.
    • Optimized workflow concurrency handling to prioritize pull request processing.
    • Updated repository permissions for improved review automation.

Split single claude job into two:
- auto-review: fires on PR open/push/ready_for_review (skips drafts)
- claude-assist: fires on @claude mentions (existing behavior)

Plugin changes based on research:
- Kept pr-review-toolkit (6-agent review suite)
- Dropped security-guidance (PreToolUse hook, not useful in Actions)
- Dropped code-review (overlaps with pr-review-toolkit)
- Dropped semgrep (does not exist in any marketplace)

Also bumps contents permission to write on both jobs.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 25, 2026

Note

Currently processing new changes in this PR. This may take a few minutes, please wait...

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 00ceda07-9507-4f99-9366-988c5811b599

📥 Commits

Reviewing files that changed from the base of the PR and between 04560d4 and 93db605.

📒 Files selected for processing (1)
  • .github/workflows/claude-review.yml
 _______________________________
< When in doubt, review it out. >
 -------------------------------
  \
   \   (\__/)
       (•ㅅ•)
       /   づ
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch enhance-review-workflow

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

Tip

CodeRabbit can use your project's `biome` configuration to improve the quality of JS/TS/CSS/JSON code reviews.

Add a configuration file to your project to customize how CodeRabbit runs biome.

jrenaldi79 and others added 2 commits March 26, 2026 07:29
Adds security-review job using anthropics/claude-code-security-review
action. Runs on every non-draft PR alongside auto-review. Analyzes
diffs for injection attacks, auth flaws, data exposure, crypto
weaknesses, and other security vulnerabilities.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
After Claude's auto-review completes, a new codex-audit job triggers
the Codex GitHub App with @codex review. A purpose-built AGENTS.md
is copied into the workspace so Codex acts as an auditor of Claude's
review rather than performing an independent review.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@jrenaldi79 jrenaldi79 merged commit a4b65f6 into main Mar 25, 2026
4 of 5 checks passed
@jrenaldi79 jrenaldi79 deleted the enhance-review-workflow branch March 25, 2026 23:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant