From 45b3456e87a505f3893f6905a557fc42d4839005 Mon Sep 17 00:00:00 2001 From: Ignacio Freiberg Date: Wed, 3 Jun 2026 11:51:56 -0300 Subject: [PATCH] Allow Cursor bot to trigger Claude Code review claude-code-action@v1 rejects non-human (bot/App) actors unless they are in allowed_bots, which defaulted to empty. Cursor-opened PRs were blocked. Add an overridable allowed_bots workflow_call input defaulting to "cursor" and pass it through to the action. Co-authored-by: Cursor --- .github/workflows/claude-code-review-reusable.yml | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/.github/workflows/claude-code-review-reusable.yml b/.github/workflows/claude-code-review-reusable.yml index 090de3a..d2060c7 100644 --- a/.github/workflows/claude-code-review-reusable.yml +++ b/.github/workflows/claude-code-review-reusable.yml @@ -2,6 +2,12 @@ name: Claude Code Review (Reusable) on: workflow_call: + inputs: + allowed_bots: + required: false + type: string + default: "cursor" + description: "Comma-separated list of bot actors allowed to trigger the review (or '*' for all). Defaults to Cursor so bot-opened PRs are reviewed. Avoid '*' on public repos." secrets: CLAUDE_CODE_OAUTH_TOKEN: required: true @@ -28,6 +34,7 @@ jobs: uses: anthropics/claude-code-action@v1 with: claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }} + allowed_bots: ${{ inputs.allowed_bots }} prompt: | Review PR #${{ github.event.pull_request.number }} in ${{ github.repository }} and post your review using `gh pr comment`.