Claude finished @fslongjin's task in 32s —— View job

Code Review: PR #338 - ci: allow auto review for external PRs

Overview

This PR adds allowed_non_write_users: "*" to the Claude Code Action configuration to allow external/fork PR authors to trigger the auto-review workflow.

Review

Change is correct and well-scoped. The single-line addition is the right way to configure the anthropics/claude-code-action to accept triggers from non-collaborator users.

Security posture remains solid. The pre-existing security guards are all preserved:

• pull_request_target trigger with no PR code execution steps
• persist-credentials: false on checkout
• Scoped GitHub App token (not GITHUB_TOKEN)
• Minimal workflow permissions (contents: read, pull-requests: write)
• Restricted allowedTools (comment, diff, view only)

The allowed_non_users: "*" parameter is a first-class security feature of the action — it gates who can start a review, but the review itself still runs under the action's own restricted tool allowlist. External users will only be able to trigger the review, not influence what the action does.

Nit (non-blocking): The PR description mentions allowed_non_write_users in the summary but the diff shows allowed_non_write_users as well, so they're consistent. The feature name is a bit misleading (double negative), but that's the upstream action's naming, not something to fix here.

No issues found. This is a clean, focused change that accomplishes its stated goal without side effects.

Claude finished @fslongjin's task in 27s —— View job

Code Review: PR #338 — ci: allow auto review for external PRs

Change Summary

Added allowed_non_write_users: "*" to the Claude Code Action configuration (.github/workflows/code-review.yml:48) to allow external/fork PR authors to trigger the auto-review workflow.

Review

Change is correct and well-scoped. The single-line addition is the appropriate configuration for the anthropics/claude-code-action to accept triggers from non-collaborator users.

Security posture remains solid. The pre-existing security guards are preserved:

• pull_request_target trigger with no PR code execution steps
• persist-credentials: false on checkout
• Scoped GitHub App token (not GITHUB_TOKEN)
• Minimal workflow permissions (contents: read, pull-requests: write)
• Restricted allowedTools (comment, diff, view only)

The allowed_non_write_users: "*" parameter is a first-class security feature of the action — it gates who can start a review, but the review itself still runs under the action's own restricted tool allowlist. External users will only be able to trigger the review, not influence what the action does.

No issues found. This is a clean, focused change that accomplishes its stated goal without side effects.

• Branch: ci/allow-external-pr-auto-review
• File changed: .github/workflows/code-review.yml (+1/-0)
• Commit: 5db3401