Skip to content

fix: use OIDC via claude-code-action, remove ANTHROPIC_API_KEY, harde… #16

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
yanas merged 1 commit into from
Mar 12, 2026
Merged

fix: use OIDC via claude-code-action, remove ANTHROPIC_API_KEY, harde… #16

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
137 changes: 57 additions & 80 deletions .github/workflows/pr-classify.yml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -7,12 +7,13 @@ on:
permissions:
contents: read
pull-requests: write
id-token: write

jobs:
classify:
runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v4
- uses: actions/checkout@34e114876b0b11c390a56381ad16ebd13914f8d5 # v4
with:
fetch-depth: 0

Expand All @@ -21,125 +22,101 @@ jobs:
env:
BASE_REF: ${{ github.base_ref }}
run: |
# Get the list of changed files and diff stat
DIFF_STAT=$(git diff "origin/$BASE_REF"...HEAD --stat 2>/dev/null || echo "Unable to compute diff stat")
CHANGED_FILES=$(git diff "origin/$BASE_REF"...HEAD --name-only 2>/dev/null || echo "")

# Write to files to avoid shell escaping issues when passing to the action
echo "$DIFF_STAT" > /tmp/diff_stat.txt
echo "$CHANGED_FILES" > /tmp/changed_files.txt

- name: Classify PR
id: classifier
continue-on-error: true
env:
ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
PR_TITLE: ${{ github.event.pull_request.title }}
PR_BODY: ${{ github.event.pull_request.body }}
run: |
CHANGED_FILES=$(cat /tmp/changed_files.txt)
DIFF_STAT=$(cat /tmp/diff_stat.txt)

PROMPT="You are classifying a pull request for jitsi-meet, an open-source WebRTC
video conferencing platform built with React/Redux for web and React Native for mobile.

PR Title: $PR_TITLE
PR Body: $PR_BODY

Changed files:
$CHANGED_FILES

Diff stat:
$DIFF_STAT

Platform hints for changed files:
- Files in android/, *.android.ts → platform: android
- Files in ios/, *.ios.ts → platform: ios
- Files matching *.native.ts or in react-native-sdk/ → platform: native
- Files matching *.web.ts, *.web.tsx, css/, webpack.config.js, modules/ → platform: web
- Files matching *.any.ts or in react/features/ with no platform suffix → could be multiple platforms

Based ONLY on the PR title, body, and changed files listed above, respond with ONLY
valid JSON (no explanation, no markdown fences):
{
\"type\": \"<feature|fix|chore|refactor|language|documentation|test|security>\",
\"platforms\": [\"<web|android|ios|native>\"],
\"summary\": \"<1-2 sentence plain English summary of what this PR does>\"
}"

RESPONSE=$(curl -s https://api.anthropic.com/v1/messages \
-H "x-api-key: $ANTHROPIC_API_KEY" \
-H "anthropic-version: 2023-06-01" \
-H "content-type: application/json" \
-d "$(jq -n --arg prompt "$PROMPT" '{
model: "claude-haiku-4-5-20251001",
max_tokens: 256,
messages: [{role: "user", content: $prompt}]
}')")

OUTPUT=$(echo "$RESPONSE" | jq -r '.content[0].text' | tr -d '\n')
echo "output<<EOF_DELIMITER" >> $GITHUB_OUTPUT
echo "$OUTPUT" >> $GITHUB_OUTPUT
echo "EOF_DELIMITER" >> $GITHUB_OUTPUT

- name: Apply labels and post comment
uses: anthropics/claude-code-action@beta
with:
model: claude-haiku-4-5-20251001
github_token: ${{ secrets.GITHUB_TOKEN }}
direct_prompt: |
You are classifying a pull request for jitsi-meet, an open-source WebRTC
video conferencing platform built with React/Redux for web and React Native for mobile.

PR Title: ${{ github.event.pull_request.title }}
PR Body: ${{ github.event.pull_request.body }}

Changed files:
$(cat /tmp/changed_files.txt)

Diff stat:
$(cat /tmp/diff_stat.txt)

Platform hints for changed files:
- Files in android/, *.android.ts → platform: android
- Files in ios/, *.ios.ts → platform: ios
- Files matching *.native.ts or in react-native-sdk/ → platform: native
- Files matching *.web.ts, *.web.tsx, css/, webpack.config.js, modules/ → platform: web
- Files matching *.any.ts or in react/features/ with no platform suffix → could be multiple platforms

Based ONLY on the PR title, body, and changed files listed above, respond with ONLY
valid JSON (no explanation, no markdown fences):
{
"type": "<feature|fix|chore|refactor|language|documentation|test|security>",
"platforms": ["<web|android|ios|native>"],
"summary": "<1-2 sentence plain English summary of what this PR does>"
}

- name: Apply labels
if: always()
uses: actions/github-script@v7
env:
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
uses: actions/github-script@f28e40c7f34bde8b3046d885e986cb6290c5673b # v7
with:
script: |
const pr = context.payload.pull_request;
const owner = context.repo.owner;
const repo = context.repo.repo;
const issue_number = pr.number;

// --- Parse classifier output ---
const classifierOutput = '${{ steps.classifier.outputs.output }}';
const validTypes = ['feature', 'fix', 'chore', 'refactor', 'language', 'documentation', 'test', 'security'];
const validPlatforms = ['web', 'android', 'ios', 'native'];

// Read the JSON posted as a comment by claude-code-action
const comments = await github.rest.issues.listComments({ owner, repo, issue_number });
const botComment = comments.data
.reverse()
.find(c => c.user.login === 'github-actions[bot]' && c.body.includes('"type"'));

let typeLabel = null;
let platformLabels = [];
let parseError = false;

if (classifierOutput) {
if (botComment) {
try {
// Extract JSON even if there's surrounding text
const match = classifierOutput.match(/\{[\s\S]*\}/);
const match = botComment.body.match(/\{[\s\S]*\}/);
if (match) {
const parsed = JSON.parse(match[0]);
const validTypes = ['feature', 'fix', 'chore', 'refactor', 'language', 'documentation', 'test', 'security'];
const validPlatforms = ['web', 'android', 'ios', 'native'];

if (validTypes.includes(parsed.type)) {
typeLabel = parsed.type;
}
if (validTypes.includes(parsed.type)) typeLabel = parsed.type;
if (Array.isArray(parsed.platforms)) {
platformLabels = parsed.platforms
.filter(p => validPlatforms.includes(p));
platformLabels = parsed.platforms.filter(p => validPlatforms.includes(p));
}
}
} catch (e) {
parseError = true;
core.warning(`Failed to parse classifier output: ${e.message}`);
}

// Delete the raw JSON comment
await github.rest.issues.deleteComment({ owner, repo, comment_id: botComment.id });
}

// --- Remove old type/platform labels ---
const validTypes = ['feature', 'fix', 'chore', 'refactor', 'language', 'documentation', 'test', 'security'];
const validPlatforms = ['web', 'android', 'ios', 'native'];
// Remove old type/platform labels
const existingLabels = await github.rest.issues.listLabelsOnIssue({ owner, repo, issue_number });
const toRemove = existingLabels.data
.filter(l => validTypes.includes(l.name) || validPlatforms.includes(l.name))
.map(l => l.name);

for (const label of toRemove) {
try {
await github.rest.issues.removeLabel({ owner, repo, issue_number, name: label });
} catch (e) {
// ignore if label was already removed
}
} catch (e) {}
}

// --- Apply new labels ---
// Apply new labels
const labelsToAdd = [typeLabel, ...platformLabels].filter(Boolean);
if (labelsToAdd.length > 0) {
await github.rest.issues.addLabels({ owner, repo, issue_number, labels: labelsToAdd });
}

Loading