anthropics / anthropics/claude-code-action
Bug: Claude GitHub App missing "Commit statuses" permission
- Lingua principale
- TypeScript
- Stelle
- 8.9k
- Fork
- 2.1k
- Merge medio
- 3g 9h
- PR unite (30g)
- 10
Descrizione
**Describe the bug**
When Claude Code Action uses the Bash Tool to execute `gh pr checks` command in a GitHub Actions workflow, a GraphQL error occurs due to insufficient permissions for the Claude GitHub App.
**To Reproduce**
Steps to reproduce the behavior:
1. Run Claude Code Action in a GitHub Actions workflow
2. Claude uses the Bash Tool to execute:
```bash
gh pr checks --json name,state,completedAt,link
```
3. See error: `GraphQL: Resource not accessible by integration (node.statusCheckRollup.nodes.0.commit.statusCheckRollup)`
**Expected behavior**
The Claude GitHub App should have the `commit statuses: read` permission granted, allowing the Bash Tool to successfully retrieve PR check status information via the GitHub GraphQL API.
**Screenshots**
**Workflow yml file**
(I can provide this if needed, but the issue occurs when Claude's Bash Tool executes `gh pr checks` regardless of the specific workflow configuration)
**API Provider**
- [x] Anthropic First-Party API (default)
- [ ] AWS Bedrock
- [ ] GCP Vertex
**Additional context**
The root cause is that the Claude GitHub App is missing the `commit statuses: read` permission. The `gh pr checks` command requires both `checks: read` and `commit statuses: read` permissions to access all check information via the GitHub GraphQL API. When Claude Code Action uses the Bash Tool to run this command, it fails because the underlying GitHub App token doesn't have the necessary `commit statuses: read` permission to access the GraphQL API's `statusCheckRollup` field.
Guida per i contributori
Apri la guida per i contributori
Valutazione
Questa issue non è ancora stata valutata.