feat: split Claude workflow into interactive + issue automation jobs

[don-petry]

Summary

• Splits the single claude job into two: claude (interactive PR reviews and @claude mentions) and claude-issue (issue-triggered automation).
• The claude-issue job runs in automation mode with scoped tools to create PRs, self-review, check CI, and tag code owners when ready.
• Adds actions: read and checks: read permissions to both jobs, aligning with the org standard in petry-projects/.github.

Test plan

• Label an issue with claude and verify the claude-issue job triggers, creates a PR, self-reviews, and tags code owners.
• Open a PR and verify the claude job runs for automatic code review.
• Comment @claude on a PR and verify the interactive job responds.

🤖 Generated with Claude Code

Summary by CodeRabbit

• New Features

  • Introduced automated job for issues labeled "claude" that automatically generates pull requests and iterates on feedback through code review and CI processes

• Chores

  • Updated GitHub Actions workflow to reorganize event triggers and refine job permissions for improved workflow management

[coderabbitai]

Caution

Review failed

Pull request was closed or merged during review

📝 Walkthrough

Walkthrough

The PR refactors the Claude Code GitHub Actions workflow by removing issue-triggered logic from the existing claude job and introducing a new claude-issue job specifically designed to handle labeled issues with automation for PR creation, reviews, and CI management.

Changes

Cohort / File(s)	Summary
Claude Code Workflow Updates .github/workflows/claude.yml	Refactored claude job to remove issue-triggered logic and added explicit permissions (actions: read, checks: read). Introduced new claude-issue job that triggers on labeled issues to automate issue resolution via PR creation, self-review, CI management, and owner notification using Claude Code action with constrained tools and multi-step prompt directives.

Estimated code review effort

🎯 3 (Moderate) | ⏱️ ~20 minutes

Possibly related PRs

• Add Claude Code GitHub Action #5: Modifies the same GitHub Actions workflow to adjust Claude Code action triggers and conditions for issue and comment handling.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically summarizes the main change: splitting the Claude workflow into two distinct jobs (interactive and issue automation), which aligns perfectly with the file changes showing the removal of issue-triggered logic from the original job and the introduction of a new dedicated claude-issue job.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch feat/claude-auto-pr

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Splits the existing Claude Code GitHub Actions workflow into two separate jobs to support both interactive PR review usage and issue-label-triggered automation, aligning permissions with the referenced org standard.

Changes:

• Split the single claude job into claude (interactive PR reviews / @claude mentions) and claude-issue (issue labeled automation).
• Added actions: read and checks: read permissions to both jobs and passed them via additional_permissions.
• Configured claude-issue to run in automation mode with a constrained tool allowlist and a multi-step implementation/review/CI prompt.

Comments suppressed due to low confidence (1)

.github/workflows/claude.yml:43

• The pinned actions/checkout commit hash here is the same one referenced elsewhere in this repo as # v4 (e.g., .github/workflows/codeql.yml). The # v6.0.2 annotation is likely incorrect/misleading; please align the inline version comment with the actual release for this pin.

      - name: Checkout repository
        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
        with:

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

The allowed tool set for claude-issue doesn't appear to permit several actions required by the prompt (leaving PR comments/replies, resolving review threads, and tagging code owners). With only gh pr create/view and gh run view/watch, the job likely can't complete steps 3 and 5 of the prompt. Expand the allowed tools to include the minimal gh commands/APIs needed for commenting and thread resolution (and any other operations you expect the automation to perform).

[don-petry]

Addressed: added gh pr comment and gh issue comment to --allowedTools, and removed Bash(cat:*). Note that git commit/push and comment management are already in the action's base tool set — --allowedTools only adds additional tools on top of those defaults.

[Copilot]

Same as above: this actions/checkout pin uses the same commit hash that other workflows annotate as # v4, so the # v6.0.2 comment is likely inaccurate. Align the inline version comment to avoid confusion when updating pins later.

Suggested change

	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v4

[don-petry]

The SHA de0fac2e4500dabe0009e67214ff5f5447ce83dd maps to actions/checkout v6.0.2, not v4. The comment is correct.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud