03c7dc09e1
- Add forgejo-code-review-skill change: Claude Code slash command for multi-agent PR review using forgejo-mcp tools - Add forgejo-action-code-review change: Forgejo Actions workflow for automated CI-triggered code review Both proposals complete, ready for design/specs phase. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
32 lines
2.5 KiB
Markdown
32 lines
2.5 KiB
Markdown
# Forgejo Action for Claude Code Review
|
|
|
|
## Why
|
|
|
|
The `/code-review` skill (from the `forgejo-code-review-skill` change) works interactively in Claude Code. But the real value for teams is **automated review on every PR** — triggered by Forgejo Actions, posting findings directly as PR review comments. GitHub has `anthropics/claude-code-action` for this; Forgejo has nothing. This action bridges that gap, making AI-assisted code review available to any Forgejo instance (Codeberg, self-hosted).
|
|
|
|
## What Changes
|
|
|
|
- Add a reusable Forgejo Actions workflow (`.forgejo/workflows/claude-code-review.yml`) that runs Claude Code with forgejo-mcp on PR events
|
|
- The workflow installs Claude Code, configures forgejo-mcp as an MCP server, and invokes the `/code-review` skill in non-interactive (`-p`) mode
|
|
- Findings are posted as a Forgejo PR review with inline comments via `create_pull_review`
|
|
- Supports `pull_request_target` trigger for fork PRs (secrets access) with safe checkout patterns
|
|
- Configurable via workflow inputs: model tier, confidence threshold, max turns, additional review instructions
|
|
|
|
## Capabilities
|
|
|
|
### New Capabilities
|
|
|
|
- `action-code-review`: The Forgejo Actions workflow definition, environment setup (Claude Code installation, MCP server configuration, secret management), safe PR checkout patterns, and integration between Claude Code's `-p` mode and forgejo-mcp's review tools. Covers trigger configuration, runner requirements, cost controls (`--max-turns`, `--allowedTools`), and output handling.
|
|
|
|
### Modified Capabilities
|
|
|
|
<!-- None. This consumes the code-review skill and existing MCP tools without changing them. -->
|
|
|
|
## Impact
|
|
|
|
- **New files**: `.forgejo/workflows/claude-code-review.yml` (the action workflow), documentation for setup
|
|
- **Dependencies**: Requires the `/code-review` skill from `forgejo-code-review-skill` change. Requires a Forgejo runner with Node.js (for Claude Code installation). Requires `ANTHROPIC_API_KEY` and `FORGEJO_TOKEN` as repository secrets.
|
|
- **Security considerations**: Uses `pull_request_target` for fork PR support — must checkout PR code carefully to avoid code injection. The workflow runs forgejo-mcp with a scoped token (only PR review permissions needed).
|
|
- **Cost implications**: Each PR review run costs ~$0.02-0.15 depending on diff size and model tier. `--max-turns` provides a hard cap.
|
|
- **No breaking changes**: Purely additive. The workflow is opt-in per repository.
|
|
- **Dependency on other change**: Depends on `forgejo-code-review-skill` being completed first (the skill prompt is what Claude Code executes)
|