Skip Claude review action on fork PRs to avoid OIDC preflight failure

[Copilot]

The Claude Code Review workflow was failing before execution on PR #77 because fork-triggered runs had no OAuth secret and the action attempted OIDC token acquisition (ACTIONS_ID_TOKEN_REQUEST_URL unavailable). This change prevents that failure path while preserving review-comment behavior for same-repo PRs.

• Workflow gating

  • Added a step-level condition so anthropics/claude-code-action@v1 runs only when the PR head repo matches the base repo.
  • Result: fork PRs safely skip the Claude step; same-repo PRs continue to run with existing pull-requests: write behavior.

• Auth-path preservation

  • Kept existing OAuth-token input and workflow comments/documentation intact.
  • Did not broaden permissions or change trigger model (pull_request remains unchanged).

- name: Run Claude Code Review
  id: claude-review
  if: ${{ github.event.pull_request.head.repo.full_name == github.repository }}
  uses: anthropics/claude-code-action@v1
  with:
    claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}

[github-actions]

PR Preview Action v1.8.1-2-g6ad689f
Preview removed because the pull request was closed.
2026-08-20 03:04 UTC