refactor: use official Anthropic code-review plugin for PR reviews

sbaerlocher · sbaerlocher · commit a3fe9eadae31 · 2026-03-09T21:54:35.000+01:00
Replace manual review prompt and tool allowlist with the official
code-review plugin from claude-code-plugins.
diff --git a/.github/workflows/ai-claude-review.yml b/.github/workflows/ai-claude-review.yml
@@ -13,21 +13,18 @@ jobs:
     timeout-minutes: 15
     permissions:
       contents: read
-      pull-requests: read
+      pull-requests: write
       issues: read
       id-token: write
 
     steps:
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+        with:
+          fetch-depth: 1
 
       - uses: anthropics/claude-code-action@26ec041249acb0a944c0a47b6c0c13f05dbc5b44 # v1
         with:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
-          prompt: |
-            Review ONLY the changes in this PR, not the entire codebase.
-            First run `gh pr diff ${{ github.event.pull_request.number }}` to see the diff.
-            Then run `gh pr view ${{ github.event.pull_request.number }}` for context.
-            Focus your review on: code quality, bugs, performance, and security.
-            Use CLAUDE.md for project conventions if present.
-            Post your review as a single comment via `gh pr comment ${{ github.event.pull_request.number }}`.
-          claude_args: '--allowed-tools "Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"'
+          plugin_marketplaces: "https://github.com/anthropics/claude-code.git"
+          plugins: "code-review@claude-code-plugins"
+          prompt: "/code-review:code-review ${{ github.repository }}/pull/${{ github.event.pull_request.number }}"
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -8,6 +8,11 @@ This is a rolling release - changes are deployed continuously to `main`.
 
 ## 2026-03-09
 
+### Changed
+
+- **ai-claude-review.yml**: Switch from manual review prompt to official
+  Anthropic `code-review` plugin via `claude-code-plugins`
+
 ### Fixed
 
 - **ai-claude-review.yml**: Scope Claude review to PR diff only instead of
