feat: upgrade CC GHA to v1

.github/workflows/claude-code-review.yml

@@ -17,6 +17,11 @@ on:
         required: false
         type: string
         default: ''
+      allowed_tools:
+        description: 'Comma-separated list of tools to allow during the review'
+        required: false
+        type: string
+        default: ''
 
 permissions:
   contents: write
@@ -28,10 +33,10 @@ jobs:
   claude-review:
     if: |
       (
-        (github.event_name == 'pull_request' && contains(github.event.pull_request.body, '@claude') && (github.event.pull_request.author_association == 'OWNER' || github.event.pull_request.author_association == 'MEMBER')) ||
-        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && (github.event.comment.author_association == 'OWNER' || github.event.comment.author_association == 'MEMBER')) ||
-        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && (github.event.comment.author_association == 'OWNER' || github.event.comment.author_association == 'MEMBER')) ||
-        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && (github.event.review.author_association == 'OWNER' || github.event.review.author_association == 'MEMBER'))
+        (github.event_name == 'pull_request' && contains(github.event.pull_request.body, '@claude')) ||
+        (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
+        (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
+        (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude'))
       )
     runs-on: ubuntu-latest
     steps:
@@ -58,25 +63,25 @@ jobs:
           set -e
 
           EXCLUDE_PATHS=(
-              ':!vendor/**'
-              ':!node_modules/**'
-              ':!dist/**'
-              ':!build/**'
-              ':!out/**'
-              ':!target/**'
-              ':!bin/**'
-              ':!coverage/**'
-              ':!package-lock.json'
-              ':!yarn.lock'
-              ':!pnpm-lock.yaml'
-              ':!composer.lock'
-              ':!Pipfile.lock'
-              ':!poetry.lock'
-              ':!go.sum'
-              ':!*.min.js'
-              ':!*.min.css'
-              ':!*.bundle.js'
-              ':!*.bundle.css'
+              ':!**/vendor/**'
+              ':!**/node_modules/**'
+              ':!**/dist/**'
+              ':!**/build/**'
+              ':!**/out/**'
+              ':!**/target/**'
+              ':!**/bin/**'
+              ':!**/coverage/**'
+              ':!**/package-lock.json'
+              ':!**/yarn.lock'
+              ':!**/pnpm-lock.yaml'
+              ':!**/composer.lock'
+              ':!**/Pipfile.lock'
+              ':!**/poetry.lock'
+              ':!**/go.sum'
+              ':!**/*.min.js'
+              ':!**/*.min.css'
+              ':!**/*.bundle.js'
+              ':!**/*.bundle.css'
           )
 
           # Get PR number from the event
@@ -178,16 +183,34 @@ jobs:
         uses: auth0/auth0-ai-pr-analyzer-gh-action/hide-previous-reviews@main
         with:
           pr_number: ${{ github.event.pull_request.number || github.event.issue.number }}
-          github_token: ${{ secrets.GITHUB_TOKEN }}
+          github_token: ${{ github.token }}
 
-      - name: Claude Code Action with Bedrock
-        uses: anthropics/claude-code-action@950bdc01df83ec90f3e4aad85504e8e84b20a035 #v0.6.11
+      - name: Trigger Claude Code
+        uses: anthropics/claude-code-action@7ed3b616d54fd445625b77b219342949146bae9e  # v1.0.7
         with:
-          model: arn:aws:bedrock:us-east-1:340752820498:application-inference-profile/mxelqitzlze2
-          use_bedrock: "true"
-          github_token: ${{ secrets.GITHUB_TOKEN }}
-          use_sticky_comment: "true"
-          custom_instructions: |
+          use_bedrock: 'true'
+          track_progress: 'true'
+          github_token: ${{ github.token }}
+          claude_args: |
+            --model arn:aws:bedrock:us-east-1:340752820498:inference-profile/us.anthropic.claude-sonnet-4-5-20250929-v1:0
+            --allowedTools "Bash(ls:*),
+              Bash(cat diff.txt),
+              Edit,
+              MultiEdit,
+              Glob,
+              Grep,
+              LS,
+              Read,
+              Write,
+              ${{ inputs.allowed_tools != '' && format('{0},', inputs.allowed_tools) || '' }}
+              mcp__github_inline_comment__create_inline_comment"
+            --disallowedTools "Bash(git diff:*),
+              Bash(git pr diff:*),
+              Read(vendor),
+              Read(package-lock.json),
+              ${{ inputs.disallowed_tools != '' && format('{0},', inputs.disallowed_tools) || '' }}
+              Read(dist)"
+          prompt: |
             <intent_analysis>
               Determine the user's intent first:
               - If the user is asking a specific question (e.g., "Why is this failing?", "How does this work?", "What's the performance impact?"), follow the <question_mode> instructions.

README.md

@@ -29,7 +29,7 @@ on:
 
 jobs:
   claude-review:
-    uses: auth0/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
 ```
 
 ## Usage
@@ -50,7 +50,7 @@ The AI will analyze the code changes and provide intelligent feedback.
 ```yaml
 jobs:
   claude-review:
-    uses: auth0/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
     with:
       custom_review_instructions: |
         When reviewing code changes, please:
@@ -74,7 +74,7 @@ For a basic setup without any custom parameters:
 ```yaml
 jobs:
   claude-review:
-    uses: auth0/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
 ```
 
 #### Ignoring Files and Directories
@@ -86,19 +86,28 @@ You can prevent the reviewer from reading specific files and directories by usin
 ```yaml
 jobs:
   claude-review:
-    uses: auth0/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
     with:
       disallowed_tools: |
         Read(build)
         Read(__pycache__)
 ```
 
+**Allow additional tools:**
+```yaml
+jobs:
+  claude-review:
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    with:
+      allowed_tools: "Bash(npm:*),Bash(yarn:*)"
+```
+
 You can also use wildcards with the star symbol:
 
 ```yaml
 jobs:
   claude-review:
-    uses: auth0/ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
+    uses: auth0/auth0-ai-pr-analyzer-gh-action/.github/workflows/claude-code-review.yml@main
     with:
       disallowed_tools: |
         Read(*_mock.go)