diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml index 6585d24..c220338 100644 --- a/.github/workflows/claude-code-review.yml +++ b/.github/workflows/claude-code-review.yml @@ -21,11 +21,18 @@ concurrency: jobs: claude-review: - # Trusted fork only, and skip drafts (don't spend API/CI on unfinished PRs). - # To add more trusted owners, extend the head-owner check. + # Trusted author only, and skip drafts (don't spend API/CI on unfinished PRs). + # To add more trusted authors, extend the author check. + # + # NOTE: this checks the PR AUTHOR (user.login), not head.repo.owner.login. + # head.repo.owner.login only identifies "who owns the fork" for fork-headed + # PRs -- for an upstream-branch-headed PR (base and head both in this repo, + # e.g. from `gh stack`, or `gh pr create` without a fork), it's always this + # repo's own org, never the actual author, so that check silently skipped + # review on every such PR regardless of who opened it. if: >- github.event.pull_request.draft == false && - github.event.pull_request.head.repo.owner.login == 'jnasbyupgrade' + github.event.pull_request.user.login == 'jnasbyupgrade' runs-on: ubuntu-latest timeout-minutes: 60 permissions: