Production Workflows and Team Integration

name: Claude Code Review

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Get diff
        id: diff
        run: |
          git diff origin/${{ github.base_ref }}...HEAD > diff.txt

      - name: Run Claude Code review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          claude --print "Review this PR diff for:
          1. Security vulnerabilities
          2. Missing error handling
          3. Performance issues
          4. Code style inconsistencies with CLAUDE.md

          Diff:
          $(cat diff.txt)

          Return a structured review. If no issues found,
          say 'LGTM' with a brief explanation." > review.txt

      - name: Post review comment
        uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs')
            const review = fs.readFileSync('review.txt', 'utf8')
            github.rest.issues.createComment({
              issue_number: context.issue.number,
              owner: context.repo.owner,
              repo: context.repo.repo,
              body: `## Claude Code Review\n\n${review}`
            })

# Create the commands directory
mkdir -p .claude/commands

# Create a security-review command
cat > .claude/commands/security-review.md << 'EOF'
Review the current file or the files I specify for
security vulnerabilities. Focus on:
- SQL injection and other injection attacks
- Authentication and authorization bypasses
- Exposed sensitive data (tokens, passwords, PII)
- Unvalidated user input
- Missing rate limiting
- CSRF vulnerabilities

For each issue found:
1. Quote the vulnerable code
2. Explain why it's a vulnerability
3. Provide the fixed version
EOF

# Create a generate-tests command
cat > .claude/commands/gen-tests.md << 'EOF'
Generate comprehensive tests for the file or function
I specify. Include:
- Happy path cases
- Edge cases (empty input, null, boundary values)
- Error cases
- At least one integration test if appropriate

Match the testing framework in package.json.
Run the tests when done and fix any failures.
EOF

claude

> /security-review src/api/payments.ts

> /gen-tests src/utils/validation.ts

{
  "hooks": {
    "PostToolUse": [
      {
        "matcher": "Write|Edit",
        "hooks": [
          {
            "type": "command",
            "command": "npm run lint:fix",
            "description": "Auto-fix lint errors after edits"
          }
        ]
      }
    ],
    "Stop": [
      {
        "hooks": [
          {
            "type": "command",
            "command": "npm test -- --passWithNoTests",
            "description": "Run tests after every session"
          }
        ]
      }
    ]
  }
}