[WIP] Fix issues in .github/workflows/claude.yml

[Copilot]

• Remove invalid comments: write permission scope
• Remove outdated --model claude-3-opus-20240229 from claude_args
• Remove unsupported --temperature 0.2 from claude_args

Original prompt

The .github/workflows/claude.yml workflow is consistently failing (see run https://github.com/kimocoder/wifite2/actions/runs/23276889402 and multiple other recent runs).

There are three issues that need to be fixed in .github/workflows/claude.yml:

1. Invalid permission scope: comments: write

On line 18, comments: write is not a valid GitHub Actions permission scope. The valid scopes are contents, pull-requests, issues, actions, etc. Comment permissions are already covered by issues: write and pull-requests: write. This line must be removed.

2. Invalid/outdated model in claude_args

On line 41, --model claude-3-opus-20240229 is passed via claude_args. This is an outdated model identifier. Remove it and let the action use its default model.

3. Invalid CLI flag --temperature in claude_args

On line 43, --temperature 0.2 is not a supported Claude CLI argument. Remove it.

Expected fixed file

The corrected .github/workflows/claude.yml should be:

name: Claude Code

on:
  pull_request:
    types: [opened, synchronize]
  issue_comment:
    types: [created]
  pull_request_review_comment:
    types: [created]

jobs:
  claude:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      issues: write

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4

      - name: Run Claude Code Action
        uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

          prompt: |
            You are an expert security researcher reviewing changes to wifite2 (a Python WiFi auditing tool).
            Review this pull request or comment for:
            - bugs
            - security issues
            - code quality problems
            - performance improvements
            Focus especially on Python code. Be concise but thorough. If you can fix something, do it.

          claude_args: |
            --max-turns 8

          trigger_phrase: "@claude"
          use_sticky_comment: true
          include_fix_links: true
          track_progress: true

Key changes:

• Remove invalid comments: write permission (line 18)
• Remove --model claude-3-opus-20240229 from claude_args (let the action use its default model)
• Remove --temperature 0.2 from claude_args (not a valid Claude CLI flag)

The following is the prior conversation context from the user's chat exploration (may be truncated):

User: Fix the eeror

Assistant:

Let me look at the failing workflow run and understand the error.

Assistant: I can see the failing workflow run 23276889402 is from the .github/workflows/claude.yml workflow. Let me fetch that file and look at its content.

Assistant: Now I have all the information needed. The failing workflow run 23276889402 is from .github/workflows/claude.yml. Let me analyze the issues in the workflow file and compare against the official action.yml from anthropics/claude-code-action@v1.

Here's what I found:

Failing Workflow: .github/workflows/claude.yml

The workflow run #23276889402 (and multiple other recent runs) failed. The workflow is .github/workflows/claude.yml. Here are the issues I identified:

1. ❌ Invalid permission: comments: write

Your workflow declares:

      comments: write

comments is not a valid GitHub Actions permission scope. The valid scopes are things like contents, pull-requests, issues, actions, etc. Comment permissions are handled through the issues: write and pull-requests: write scopes. This invalid permission will cause the workflow to fail.

2. ⚠️ Invalid model in claude_args

          claude_args: |
            --model claude-3-opus-20240229
            --max-turns 8
            --temperature 0.2

The model claude-3-opus-20240229 is quite old. Additionally, --temperature is not a recognized Claude CLI argument and could cause issues.

---

Fix

Here's the corrected workflow file:

name: Claude Code

on:
  pull_request:
    types: [opened, synchronize]
  issue_comment:
    types: [created]
  pull_request_review_comment:
    types: [created]

jobs:
  claude:
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      issues: write

    steps:
      - name: Checkout repo
        uses: actions/checkout@v4

      - name: Run Claude Code Action
        uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}

         ...

</details>



<!-- START COPILOT CODING AGENT SUFFIX -->

*This pull request was created from Copilot chat.*
>

<!-- START COPILOT CODING AGENT TIPS -->
---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. [Learn more about Advanced Security.](https://gh.io/cca-advanced-security)

[Copilot]

Copilot wasn't able to review any files in this pull request.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.