ci: add Claude Code automated PR review workflow

[giswqs]

Summary

• Adds a GitHub Actions workflow that runs an automated Claude code review on pull requests, posting inline comments and a summary comment.
• PRs from known contributors (owner/member/collaborator/contributor) are reviewed automatically; first-time contributor PRs require a maintainer to opt in by commenting /claude-review, preventing token-budget abuse from throwaway accounts.
• Uses pull_request_target with a read-only checkout (persist-credentials: false, no dependency install, no code execution) and a restricted tool allowlist so untrusted fork code is never run with elevated credentials.

Test plan

• Workflow YAML passes check yaml pre-commit hook (verified locally)
• Open a test PR from a known contributor account and confirm the review runs automatically
• Comment /claude-review as a maintainer on a first-time contributor PR and confirm the review triggers
• Confirm a non-maintainer /claude-review comment does not trigger a run

Summary by CodeRabbit

• New Features
  • Added an automated code review workflow for pull requests.
  • Reviews can be triggered automatically for eligible contributions or manually with the /claude-review command.
  • Provides inline feedback and a summary comment on the pull request.
  • Includes safeguards to limit review access and prevent unrelated review runs from interfering with one another.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Pro Plus

Run ID: e6a90b02-a0d6-4398-af95-d796f8b5e378

📥 Commits

Reviewing files that changed from the base of the PR and between 4785fc0 and 5f53b11.

📒 Files selected for processing (1)

• .github/workflows/claude-code-review.yml

---

📝 Walkthrough

Walkthrough

Adds a GitHub Actions workflow that runs Claude reviews for eligible pull request events or authorized /claude-review comments, checks out the PR head, and publishes structured inline and summary review comments.

Changes

Claude Code Review Automation

Layer / File(s)	Summary
Review triggers and authorization .github/workflows/claude-code-review.yml	Adds pull request and comment triggers, concurrency cancellation, eligibility gates, and minimal workflow permissions.
Pull request context and checkout .github/workflows/claude-code-review.yml	Resolves the target PR and head SHA for each trigger type, then performs a credential-free shallow checkout.
Claude review execution and prompt .github/workflows/claude-code-review.yml	Configures Claude and GitHub authentication, tool restrictions, review formatting requirements, and security guardrails.

Estimated code review effort: 3 (Moderate) | ~20 minutes

Suggested reviewers: copilot

Poem

A rabbit reviews beneath moonlight bright,
Claude hops in with comments just right.
Inline carrots, summaries neat,
Guardrails keep the workflow sweet.
“/claude-review!” we thump our feet.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/claude-code-review-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[github-actions]

🚀 Deployed on https://6a5b9fb699b7869bb454c55a--opengeos.netlify.app