chore(deps): bump claude-code-action to v1 - #351
Conversation
Sorry, something went wrong.
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Sorry, something went wrong.
There was a problem hiding this comment.
All reported issues were addressed across 1 file
Shadow auto-approve: would not auto-approve because issues were found.
Re-trigger cubic
Sorry, something went wrong.
There was a problem hiding this comment.
All reported issues were addressed across 1 file (changes from recent commits).
Shadow auto-approve: would not auto-approve because issues were found.
Re-trigger cubic
Sorry, something went wrong.
There was a problem hiding this comment.
1 issue found across 1 file (changes from recent commits).
Prompt for AI agents (unresolved issues)
Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.
<file name=".github/workflows/claude.yml">
<violation number="1" location=".github/workflows/claude.yml:38">
P2: In Claude Code CLI v1, file editing moved from the beta-era `BatchTool` to a dedicated `Edit` tool. The updated allowed-tools list keeps `Bash(git:*)` (restricting shell to git commands only), `Read`, `Glob`, and `Grep` but omits `Edit`. Without `Edit`, Claude cannot write or modify files during a session, which limits it to read-only analysis. If the workflow intends Claude to make code changes (triggered by `@claude`), add `Edit` to the allowed tools list. If read-only is the intended scope, the current list is correct.</violation>
</file>
Shadow auto-approve: would not auto-approve because issues were found.
Tip: Review your code locally with the cubic CLI to iterate faster.
Re-trigger cubic
Sorry, something went wrong.
| anthropic_api_key: ${{ secrets.GH_ANTHROPIC_API_KEY }} | ||
| allowed_tools: "Bash(git:*),View,GlobTool,GrepTool,BatchTool" | ||
| claude_args: | | ||
| --allowedTools "Bash(git:*),Read,Glob,Grep" |
There was a problem hiding this comment.
P2: In Claude Code CLI v1, file editing moved from the beta-era BatchTool to a dedicated Edit tool. The updated allowed-tools list keeps Bash(git:*) (restricting shell to git commands only), Read, Glob, and Grep but omits Edit. Without Edit, Claude cannot write or modify files during a session, which limits it to read-only analysis. If the workflow intends Claude to make code changes (triggered by @claude), add Edit to the allowed tools list. If read-only is the intended scope, the current list is correct.
Prompt for AI agentsCheck if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/claude.yml, line 38:
<comment>In Claude Code CLI v1, file editing moved from the beta-era `BatchTool` to a dedicated `Edit` tool. The updated allowed-tools list keeps `Bash(git:*)` (restricting shell to git commands only), `Read`, `Glob`, and `Grep` but omits `Edit`. Without `Edit`, Claude cannot write or modify files during a session, which limits it to read-only analysis. If the workflow intends Claude to make code changes (triggered by `@claude`), add `Edit` to the allowed tools list. If read-only is the intended scope, the current list is correct.</comment>
<file context>
@@ -35,4 +35,4 @@ jobs:
anthropic_api_key: ${{ secrets.GH_ANTHROPIC_API_KEY }}
claude_args: |
- --allowedTools "Bash(git:*),View,GlobTool,GrepTool,BatchTool"
+ --allowedTools "Bash(git:*),Read,Glob,Grep"
</file context>
| --allowedTools "Bash(git:*),Read,Glob,Grep" | |
| --allowedTools "Bash(git:*),Read,Edit,Glob,Grep" |
Sorry, something went wrong.
Bumps anthropics/claude-code-action from @beta to @v1.