fix: Correct Claude Code Review workflow plugin configuration

[leogdion]

Problem Summary

The Claude Code Review workflow (.github/workflows/claude-code-review.yml) was failing with SDK crashes due to incorrect plugin configuration syntax introduced in commit ebf913f3 on Feb 4, 2026.

Current Broken Configuration (Before):

plugin_marketplaces: 'https://github.com/anthropics/claude-code.git'
plugins: 'code-review@claude-code-plugins'
prompt: '/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}'

Root Cause:

1. Plugin marketplace format was incorrect: used full git URL instead of GitHub short format
2. Plugin reference format was wrong: code-review@claude-code-plugins instead of code-review
3. Prompt used CLI command syntax instead of natural language instructions

Solution

Fixed Configuration (After):

plugin_marketplaces: 'anthropics/claude-code'
plugins: 'code-review'
prompt: |
  Please review this PR and provide feedback on:
  - Code quality and best practices
  - Potential bugs or issues
  - Security concerns
  - CLAUDE.md compliance

  Post your review as a comment on this pull request.

Key Changes:

• ✅ Changed plugin_marketplaces to GitHub short format: anthropics/claude-code
• ✅ Changed plugins to simple plugin name: code-review
• ✅ Replaced CLI command syntax with descriptive natural language instructions
• ✅ Kept existing allowed_bots: 'codefactor-io[bot]' configuration

Expected Behavior

After this fix:

• ✅ GitHub Actions workflow should complete without exit code 1
• ✅ No SDK crash errors in logs
• ✅ Claude successfully posts review comments on PRs
• ✅ All PR triggers work: opened, synchronize, ready_for_review, reopened

Testing

This fix should be verified by:

1. Merging this PR
2. Creating a test PR to trigger the workflow
3. Confirming the Claude Code Review action runs successfully
4. Verifying review comments appear on the test PR

References

• Claude Code Plugins Documentation
• Discover and install prebuilt plugins
• Code-Review Plugin README
• Claude Code Action Usage

Files Modified

• .github/workflows/claude-code-review.yml (lines 39-42)

Fixes the SDK crash and restores functionality to the Claude Code Review workflow.

---

Perform an AI-assisted review on

Summary by CodeRabbit

• Chores
  • Enhanced the automated code review process with improved assessment criteria, now evaluating code quality, bugs, security, and compliance standards more thoroughly on pull requests.

[coderabbitai]

📝 Walkthrough

Walkthrough

Updated the Claude Code Review workflow configuration by simplifying plugin marketplace and plugin references, and replacing a minimal prompt with a comprehensive multi-line assessment instruction that specifies evaluation criteria and comment posting behavior.

Changes

Cohort / File(s)

Summary

Workflow Configuration .github/workflows/claude-code-review.yml

Simplified plugin marketplace URL to repository qualifier (https://github.com/anthropics/claude-code.git → anthropics/claude-code), reduced plugin reference to base name (code-review@claude-code-plugins → code-review), and expanded prompt from single-line to detailed multi-line instruction covering code quality assessment, bug detection, security review, CLAUDE.md compliance, and PR comment posting.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~5 minutes

Possibly related PRs

• Update Claude Code GitHub Workflow #235: Modifies the same .github/workflows/claude-code-review.yml file with similar plugin reference and prompt configuration updates for the Claude Code Review workflow.

Poem

🐰 Hops with joy through workflows bright,
Plugin paths now sleek and light!
Prompts expanded, thorough and keen,
Claude reviews code like never seen!
Configuration refined with care,
Quality checks beyond compare! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: correcting Claude Code Review workflow plugin configuration, which matches the core fix of updating plugin references and prompt syntax.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch fix/claude-code-review-workflow

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 14.27%. Comparing base (ebf913f) to head (9353f79).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff             @@
##             main     #236      +/-   ##
==========================================
- Coverage   14.33%   14.27%   -0.06%     
==========================================
  Files          67       67              
  Lines        7179     7179              
==========================================
- Hits         1029     1025       -4     
- Misses       6150     6154       +4     

Flag	Coverage Δ
spm	14.27% <ø> (-0.05%)	⬇️
swift-6.1-jammy	14.27% <ø> (ø)
swift-6.1-noble	14.27% <ø> (ø)
swift-6.2-jammy	14.27% <ø> (ø)
swift-6.2-jammynightly	14.26% <ø> (-0.02%)	⬇️
swift-6.2-noble	14.27% <ø> (ø)
swift-6.2-noblenightly	14.27% <ø> (-0.02%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[coderabbitai]

Actionable comments posted: 0

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)

.github/workflows/claude-code-review.yml (1)

22-26: ⚠️ Potential issue | 🟠 Major

Change pull-requests: read to pull-requests: write.

The claude-code-action requires write permission on pull requests to post review comments. The current configuration grants only read access, which will prevent the action from posting comments despite the prompt instructing it to do so.

Update the permissions block (lines 22-26) to include pull-requests: write:

permissions:
  contents: read
  pull-requests: write
  issues: read
  id-token: write