Uh oh!
There was an error while loading. Please reload this page.
Route Claude workflows through Stacklok AI gateway - #1135
Conversation
Replace the shared ANTHROPIC_API_KEY with per-workflow gateway keys (STACKLOK_GATEWAY_KEY_CLAUDE_TAG, STACKLOK_GATEWAY_KEY_SLACK_NOTIFICATION, STACKLOK_GATEWAY_KEY_RELEASE_DOCS) and point each claude-code-action step at the Stacklok AI gateway via ANTHROPIC_BASE_URL.
The latest updates on your projects. Learn more about Vercel for GitHub.
|
There was a problem hiding this comment.
Pull request overview
This PR updates the repository’s Claude-based GitHub Actions workflows to route LLM traffic through the Stacklok AI gateway, replacing the shared ANTHROPIC_API_KEY secret with per-workflow gateway keys and setting ANTHROPIC_BASE_URL at the step level for anthropics/claude-code-action.
Changes:
- Swapped
secrets.ANTHROPIC_API_KEYfor per-workflow gateway secrets in allclaude-code-actionsteps touched by these workflows. - Added
ANTHROPIC_BASE_URL: https://llm-gateway.stacklok.dev/anthropicto eachclaude-code-actionstep so requests are routed via the Stacklok gateway. - Kept the action pinned to the same commit SHA while updating only auth/routing configuration.
Reviewed changes
Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.
| File | Description |
|---|---|
| .github/workflows/claude.yml | Routes @claude workflow calls through the Stacklok gateway and uses a dedicated gateway secret. |
| .github/workflows/autogen-docs-notify.yml | Routes Slack summary composition through the Stacklok gateway and uses a dedicated gateway secret. |
| .github/workflows/upstream-release-docs.yml | Routes release-docs generation and editorial review steps through the Stacklok gateway using a dedicated gateway secret. |
Suppressed comments (1)
.github/workflows/autogen-docs-notify.yml:163
- The inline comment says
anthropic_api_keyis "the separate Anthropic-auth path", but this workflow now uses a Stacklok gateway key and routes throughANTHROPIC_BASE_URL. The comment is misleading and should be updated to reflect the gateway auth path.
anthropic_api_key: ${{ secrets.STACKLOK_GATEWAY_KEY_SLACK_NOTIFICATION }}
# Skips claude-code-action's OIDC -> GitHub App token exchange
# (which needs id-token: write) and uses the job's own minimally
# scoped GITHUB_TOKEN instead. Unrelated to anthropic_api_key,
# which is the separate Anthropic-auth path.
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
Uh oh!
There was an error while loading. Please reload this page.
Description
Replaces the shared
ANTHROPIC_API_KEYsecret across the threeclaude-code-actionworkflows with per-workflow gateway keys, and routes each through the Stacklok AI gateway.claude.yml(@claudementions) →STACKLOK_GATEWAY_KEY_CLAUDE_TAGautogen-docs-notify.yml(Slack summary composition) →STACKLOK_GATEWAY_KEY_SLACK_NOTIFICATIONupstream-release-docs.yml(generation + editorial review) →STACKLOK_GATEWAY_KEY_RELEASE_DOCSEach
claude-code-actionstep also getsANTHROPIC_BASE_URL: https://llm-gateway.stacklok.dev/anthropic(a step-levelenv:, which is how the action reads a custom base URL from the calling workflow) so requests go through the gateway instead of directly to the Anthropic API.The three new secrets have already been added to the repository.
Type of change
Related issues/PRs
N/A
Submitter checklist
Content and formatting