Enhanced Claude Code workflow

[aanchalbhansali]

Summary

This PR enhances the Claude Code GitHub Actions workflow with improved security controls, better configuration, and clearer operational guidelines.

Key Changes

Security Enhancements

• Added author association checks: Claude can now only be triggered by users with OWNER, MEMBER, or COLLABORATOR permissions, preventing unauthorized usage
• Applied security checks across all trigger types: issue comments, PR review comments, PR reviews, and label events

Workflow Configuration Updates

• Upgraded to Claude Opus 4.5: Changed model from default to claude-opus-4-5 for improved performance
• Increased turn limit: Raised max turns to 100 to handle more complex tasks
• Refined tool permissions: Updated allowed tools to include specific Git, Bash, and GitHub CLI operations
• Added progress tracking: Enabled track_progress: true for better visibility into Claude's work

Improved Operational Guidelines

• Added structured prompt with clear instructions for two scenarios:
  • When working on issues: Create new branch → Implement changes → Create PR with "Closes #issue-number"
  • When working on PR feedback: Apply changes → Commit directly to existing PR (no new PR)
• Emphasizes clean, professional commit messages

Code Quality

• Reformatted conditional logic for better readability (multi-line format)
• Removed triggering on issue creation/assignment (focused on explicit @claude mentions and labels only)

Testing

This workflow change has been tested and validated in previous commits.

[aanchalbhansali]

@claude update the PR description with a summary of changes

[claude]

Claude finished @aanchalbhansali's task in 56s —— View job

---

Task: Update PR Description

Checklist:

• Read the changed workflow file
• Analyze the diff to understand what changed
• Craft a comprehensive PR description
• Update the PR description

Summary

I've successfully updated the PR description with a comprehensive summary of the changes made to the Claude Code workflow. The description highlights:

• Security enhancements with author association checks to restrict Claude triggers to authorized users only
• Workflow configuration updates including the upgrade to Claude Opus 4.5, increased turn limits, and refined tool permissions
• Improved operational guidelines with clear instructions for working on issues vs. PR feedback
• Code quality improvements with better formatting and streamlined trigger conditions

You can view the updated PR description at the top of this PR page.

---

[claude]

No issues found. Checked for bugs and CLAUDE.md compliance.