From e9413109f7cfa61e72bfe6e982f73908458cd7a7 Mon Sep 17 00:00:00 2001 From: Adarsh Prashar Date: Sun, 31 May 2026 02:49:11 +0530 Subject: [PATCH] fix(ci): grant id-token: write to the Claude workflows The claude-code-action authenticates to GitHub by minting a token via OIDC, which needs `id-token: write`. Both workflows only had contents/pull-requests (+issues), so the action failed with "Could not fetch an OIDC token. Did you remember to add id-token: write to your workflow permissions?". Add it to claude.yml and claude-pr-review.yml. --- .github/workflows/claude-pr-review.yml | 1 + .github/workflows/claude.yml | 1 + 2 files changed, 2 insertions(+) diff --git a/.github/workflows/claude-pr-review.yml b/.github/workflows/claude-pr-review.yml index 5f7e19c..26320f2 100644 --- a/.github/workflows/claude-pr-review.yml +++ b/.github/workflows/claude-pr-review.yml @@ -12,6 +12,7 @@ on: permissions: contents: read pull-requests: write + id-token: write # required: the action authenticates to GitHub via OIDC jobs: review: diff --git a/.github/workflows/claude.yml b/.github/workflows/claude.yml index d123a0e..f8863af 100644 --- a/.github/workflows/claude.yml +++ b/.github/workflows/claude.yml @@ -14,6 +14,7 @@ permissions: contents: read pull-requests: write issues: write + id-token: write # required: the action authenticates to GitHub via OIDC jobs: claude: