anthropics / anthropics/claude-code-action

Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable

Open
#649 4 comments 0 reactions 0 assignees View on GitHub
area:installation area:permissions bug p1 provider:1p
Dominant language
TypeScript
Stars
8.9k
Forks
2.1k
Avg merge
3d 9h
Merged PRs (30d)
10

Description

**Describe the bug**

I'm trying to run the action in a [workflow step](https://github.com/mozilla/neqo/actions/runs/18904110661/workflow?pr=3089#L30-L82) in `mozilla/neqo`.

**Expected behavior**

I'd expect to get a code review.

**Screenshots**

I'm getting an [error](https://github.com/mozilla/neqo/actions/runs/18904110661/job/53962702755#step:3:191):

```
Run bun run ${GITHUB_ACTION_PATH}/src/entrypoints/prepare.ts
Auto-detected mode: tag for event: pull_request
Requesting OIDC token...
Attempt 1 of 3...
Failed to get OIDC token: 66 | const id_token = yield OidcClient.getCall(id_token_url);
67 | (0, core_1.setSecret)(id_token);
68 | return id_token;
69 | }
70 | catch (error) {
71 | throw new Error(`Error message: ${error.message}`);
^
error: Error message: Unable to get ACTIONS_ID_TOKEN_REQUEST_URL env variable
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/oidc-utils.js:71:23)
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/oidc-utils.js:8:71)
at new Promise (1:11)
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/oidc-utils.js:4:12)
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/core.js:319:46)
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/core.js:31:71)
at new Promise (1:11)
at (/home/runner/work/_actions/anthropics/claude-code-action/v1/node_modules/@actions/core/lib/core.js:27:12)
at getOidcToken (/home/runner/work/_actions/anthropics/claude-code-action/v1/src/github/token.ts:8:34)
at getOidcToken (/home/runner/work/_actions/anthropics/claude-code-action/v1/src/github/token.ts:6:28)

Attempt 1 failed: Could not fetch an OIDC token. Did you remember to add `id-token: write` to your workflow permissions?
```

The workflow [has the correct permissions](https://github.com/mozilla/neqo/actions/runs/18904110661/workflow?pr=3089#L12-L15) (even at the workflow level, which is not really recommended).

The `ANTHROPIC_API_KEY` repo secret is set.

**Workflow yml file**
```yaml
- name: Run Claude Code Review
id: claude
# TODO: Would like to pin this, but the Mozilla org allowlist requires "anthropics/claude-code-action@v1"
uses: anthropics/claude-code-action@v1 # zizmor: ignore[unpinned-uses]
with:
track_progress: true
anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
use_sticky_comment: true
use_commit_signing: true
# See https://github.com/anthropics/claude-code-action/blob/main/docs/usage.md
# or https://docs.anthropic.com/en/docs/claude-code/sdk#command-line for available options
claude_args: |
--allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
```
**API Provider**

[X] Anthropic First-Party API (default)

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.