Fix Claude Code Review workflow permissions

[justin808]

Summary

• Add permissions block to the Claude Code Review caller workflow
• The reusable workflow in shakacode/.github needs issues: write, pull-requests: write, and id-token: write, but callers must explicitly grant these permissions
• Without this, the workflow fails with: "The nested job is requesting permissions but is only allowed none"

Test plan

• Verify the Claude Code Review workflow runs successfully on a new PR

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated internal GitHub Actions workflow permissions configuration for automated code review processes.

Note: This release contains no user-facing changes.

[coderabbitai]

Walkthrough

This pull request adds a permissions block to the GitHub Actions workflow configuration, specifying explicit runtime permissions for the claude-code-review workflow. The permissions grant read access to repository contents and write access to pull requests, issues, and OAuth tokens, enabling the workflow to perform necessary operations on these resources.

Changes

Cohort / File(s)	Summary
GitHub Actions Workflow Configuration .github/workflows/claude-code-review.yml	Added permissions block granting contents: read, pull-requests: write, issues: write, and id-token: write to enable workflow operations.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• Add Claude Code Review workflow #429: Directly related—modifies the same GitHub Actions workflow file, with this PR adjusting runtime permissions for the claude-code-review workflow.

Poem

🐰 A workflow gains its rightful keys,
Permissions flowing like the breeze,
Read contents, write to PR and issue grand,
With tokens trusted, now we stand!
✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically summarizes the main change: adding missing permissions to the Claude Code Review workflow.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch jg/fix-claude-review-perms

---

No actionable comments were generated in the recent review. 🎉

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}