Anthropic, Claude Code GitHub Actions

Worauf sich diese Seite beruft, wörtlich, abgerufen am 12.10.2026:

• Mention @claude in a pull request or issue comment to have Claude analyze code, implement changes, and push commits.bestätigt 10.11.2026
• Claude replies in a comment on the same issue or PR and updates it as it works.bestätigt 10.11.2026
• the triggering user must have write access to the repositorybestätigt 10.11.2026
• the Claude Code GitHub Action runs on GitHub-hosted runnersbestätigt 10.11.2026
• Claude Code installs the GitHub App, adds your authentication secret, and prepares the workflow pull request for youbestätigt 10.11.2026
• For either path, you need admin access to the repository.bestätigt 10.11.2026
• /install-github-app works only with github.com repositories.bestätigt 10.11.2026
• The Claude GitHub App is shared by every Claude feature that integrates with GitHubbestätigt 10.11.2026
• When you install the app, you accept its full permission set.bestätigt 10.11.2026
• install the GitHub CLI and authenticate it with gh auth loginbestätigt 10.11.2026
• choose between creating a long-lived token with your Claude subscription and pasting in an API keybestätigt 10.11.2026
• Claude Code saves the credential as a repository secret, named ANTHROPIC_API_KEY for an API key or CLAUDE_CODE_OAUTH_TOKEN for a subscription token.bestätigt 10.11.2026
• Claude Code then pushes a branch with the workflow files you select, already set to use that secret, and opens GitHub in your browser with a pull request ready to create.bestätigt 10.11.2026
• Create and merge that pull request, and @claude works in the repository.bestätigt 10.11.2026
• Before v2.1.229, Claude wrote its review only to the workflow run log.bestätigt 10.11.2026
• the command prints a notice and exits instead of starting setupbestätigt 10.11.2026
• the Claude Code GitHub Action runs on GitHub-hosted runners, which consume your GitHub Actions minutesbestätigt 10.11.2026
• Each run consumes two kinds of resourcesbestätigt 10.11.2026
• If you authenticate with an OAuth token, runs use your Claude subscription instead of API billing.bestätigt 10.11.2026
• When omitted, the Claude Code GitHub Action authenticates as the Claude GitHub Appbestätigt 10.11.2026
• GitHub doesn’t trigger workflows on commits made with the default GITHUB_TOKENbestätigt 10.11.2026
• which keeps bots from triggering Claude in a loopbestätigt 10.11.2026
• gives Claude a local copy of the repository to work inbestätigt 10.11.2026
• since an OAuth token is tied to the subscription of the person who ranbestätigt 10.11.2026
• The Claude Code GitHub Action is built on the SDKbestätigt 10.11.2026
• Claude runs without waiting for a mentionbestätigt 10.11.2026
• Never commit API keys or OAuth tokens directly to your repository.bestätigt 10.11.2026
• For a plain-text prompt, Claude has no shell or GitHub API access until you grant the tools the prompt needsbestätigt 10.11.2026
• GitHub runs scheduled workflows only from the default branch and, in public repositories, disables the schedule after 60 days without repository activity.bestätigt 10.11.2026
• GitHub doesn’t trigger workflows on commits made with the defaultbestätigt 10.11.2026
• On public repositories, GitHub withholds secrets from runs triggered by fork pull requests, so the review runs only on pull requests from branches in the same repository.bestätigt 10.11.2026
• When you install the app, you accept its full permission set. GitHub doesn’t let you accept a subset.bestätigt 10.11.2026
• To avoid storing a long-lived secret entirely, authenticate through workload identity federationbestätigt 10.11.2026
• To allow specific users without write access, set allowed_non_write_users and pass your own github_token input.bestätigt 10.11.2026
• By default, results appear in the workflow run log rather than a comment.bestätigt 10.11.2026