anthropics / anthropics/claude-code-action

Bug: Claude GitHub App missing "Commit statuses" permission

Open
#648 0 comments 3 reactions 0 assignees View on GitHub
area:permissions bug p2 provider:1p
Dominant language
TypeScript
Stars
8.9k
Forks
2.1k
Avg merge
3d 9h
Merged PRs (30d)
10

Description

**Describe the bug**

When Claude Code Action uses the Bash Tool to execute `gh pr checks` command in a GitHub Actions workflow, a GraphQL error occurs due to insufficient permissions for the Claude GitHub App.

**To Reproduce**

Steps to reproduce the behavior:

1. Run Claude Code Action in a GitHub Actions workflow
2. Claude uses the Bash Tool to execute:
```bash
gh pr checks --json name,state,completedAt,link
```
3. See error: `GraphQL: Resource not accessible by integration (node.statusCheckRollup.nodes.0.commit.statusCheckRollup)`

**Expected behavior**

The Claude GitHub App should have the `commit statuses: read` permission granted, allowing the Bash Tool to successfully retrieve PR check status information via the GitHub GraphQL API.

**Screenshots**

Image

**Workflow yml file**

(I can provide this if needed, but the issue occurs when Claude's Bash Tool executes `gh pr checks` regardless of the specific workflow configuration)

**API Provider**

- [x] Anthropic First-Party API (default)
- [ ] AWS Bedrock
- [ ] GCP Vertex

**Additional context**

The root cause is that the Claude GitHub App is missing the `commit statuses: read` permission. The `gh pr checks` command requires both `checks: read` and `commit statuses: read` permissions to access all check information via the GitHub GraphQL API. When Claude Code Action uses the Bash Tool to run this command, it fails because the underlying GitHub App token doesn't have the necessary `commit statuses: read` permission to access the GraphQL API's `statusCheckRollup` field.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.