Christoph Görn 03c7dc09e1 feat: ✨ add OpenSpec changes for Forgejo code review integration

- Add forgejo-code-review-skill change: Claude Code slash command for
  multi-agent PR review using forgejo-mcp tools
- Add forgejo-action-code-review change: Forgejo Actions workflow for
  automated CI-triggered code review

Both proposals complete, ready for design/specs phase.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-06 11:31:46 +01:00

2.5 KiB

Raw Permalink Blame History

Forgejo Action for Claude Code Review

Why

The /code-review skill (from the forgejo-code-review-skill change) works interactively in Claude Code. But the real value for teams is automated review on every PR — triggered by Forgejo Actions, posting findings directly as PR review comments. GitHub has anthropics/claude-code-action for this; Forgejo has nothing. This action bridges that gap, making AI-assisted code review available to any Forgejo instance (Codeberg, self-hosted).

What Changes

Add a reusable Forgejo Actions workflow (.forgejo/workflows/claude-code-review.yml) that runs Claude Code with forgejo-mcp on PR events
The workflow installs Claude Code, configures forgejo-mcp as an MCP server, and invokes the /code-review skill in non-interactive (-p) mode
Findings are posted as a Forgejo PR review with inline comments via create_pull_review
Supports pull_request_target trigger for fork PRs (secrets access) with safe checkout patterns
Configurable via workflow inputs: model tier, confidence threshold, max turns, additional review instructions

Capabilities

New Capabilities

action-code-review: The Forgejo Actions workflow definition, environment setup (Claude Code installation, MCP server configuration, secret management), safe PR checkout patterns, and integration between Claude Code's -p mode and forgejo-mcp's review tools. Covers trigger configuration, runner requirements, cost controls (--max-turns, --allowedTools), and output handling.

Modified Capabilities

Impact

New files: .forgejo/workflows/claude-code-review.yml (the action workflow), documentation for setup
Dependencies: Requires the /code-review skill from forgejo-code-review-skill change. Requires a Forgejo runner with Node.js (for Claude Code installation). Requires ANTHROPIC_API_KEY and FORGEJO_TOKEN as repository secrets.
Security considerations: Uses pull_request_target for fork PR support — must checkout PR code carefully to avoid code injection. The workflow runs forgejo-mcp with a scoped token (only PR review permissions needed).
Cost implications: Each PR review run costs ~$0.02-0.15 depending on diff size and model tier. --max-turns provides a hard cap.
No breaking changes: Purely additive. The workflow is opt-in per repository.
Dependency on other change: Depends on forgejo-code-review-skill being completed first (the skill prompt is what Claude Code executes)

2.5 KiB Raw Permalink Blame History