From b53604ca76b5e7b3a8de5e384d9bb85eb0d10d2b Mon Sep 17 00:00:00 2001
From: Jeremiah Lowin <153965+jlowin@users.noreply.github.com>
Date: Mon, 29 Sep 2025 20:35:44 -0400
Subject: [PATCH] Fix claude-code-action@v1 authentication (#1958)

---
 .github/workflows/marvin-dedupe-issues.yml | 2 ++
 .github/workflows/marvin-label-triage.yml  | 2 ++
 2 files changed, 4 insertions(+)

diff --git a/.github/workflows/marvin-dedupe-issues.yml b/.github/workflows/marvin-dedupe-issues.yml
index 9c943f9d4..a7ba89f68 100644
--- a/.github/workflows/marvin-dedupe-issues.yml
+++ b/.github/workflows/marvin-dedupe-issues.yml
@@ -17,6 +17,7 @@ jobs:
     permissions:
       contents: read
       issues: write
+      id-token: write
 
     steps:
       - name: Checkout repository
@@ -73,6 +74,7 @@ jobs:
       - name: Run Marvin dedupe command
         uses: anthropics/claude-code-action@v1
         with:
+          github_token: ${{ steps.marvin-token.outputs.token }}
           prompt_file: /tmp/claude-prompts/dedupe-prompt.txt
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_FOR_CI }}
           claude_args: |
diff --git a/.github/workflows/marvin-label-triage.yml b/.github/workflows/marvin-label-triage.yml
index a31991b3e..9cba2c6a5 100644
--- a/.github/workflows/marvin-label-triage.yml
+++ b/.github/workflows/marvin-label-triage.yml
@@ -24,6 +24,7 @@ jobs:
       contents: read
       issues: write
       pull-requests: write
+      id-token: write
 
     steps:
       - name: Checkout base repository
@@ -148,6 +149,7 @@ jobs:
       - name: Run Marvin for Issue Triage
         uses: anthropics/claude-code-action@v1
         with:
+          github_token: ${{ steps.marvin-token.outputs.token }}
           prompt_file: /tmp/claude-prompts/triage-prompt.txt
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY_FOR_CI }}
           claude_args: |