Point the Claude workflows at the API key secret that actually exists

[jayzuccarelli]

Both Claude workflows asked for secrets.CLAUDE_CODE_OAUTH_TOKEN. That secret was never set on this repo. GitHub resolves a missing secret to an empty string rather than failing loudly, so the action ran with no credential and claude-review failed on every pull request.

claude-code-action@v1 takes anthropic_api_key as an equivalent input, so both workflows now use that, and the ANTHROPIC_API_KEY repo secret is set.

Opened ready for review rather than as a draft on purpose: this PR is the test. If the check goes green here, the fix works.

Verified: all three workflow files still parse as YAML, and no reference to the old secret name remains under .github/.

🤖 Generated with Claude Code

Summary by CodeRabbit

• Chores
  • Updated automated code review and assistant workflows to use the configured Anthropic API key.
  • Existing workflow triggers and steps remain unchanged.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 172b9162-a802-42d9-a81b-75306b881869

📥 Commits

Reviewing files that changed from the base of the PR and between d6dcd41 and 400eb25.

📒 Files selected for processing (2)

• .github/workflows/claude-code-review.yml
• .github/workflows/claude.yml

---

📝 Walkthrough

Walkthrough

Both Claude Code GitHub Actions workflows now pass secrets.ANTHROPIC_API_KEY through the anthropic_api_key input instead of using the OAuth token secret.

Changes

Claude workflow authentication

Layer / File(s)	Summary
Update Claude action authentication inputs .github/workflows/claude-code-review.yml, .github/workflows/claude.yml	Both workflows replace claude_code_oauth_token with anthropic_api_key sourced from secrets.ANTHROPIC_API_KEY.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• jayzuccarelli/autofill#23: Updates Claude Code workflow authentication configuration using the OAuth token and Anthropic API key inputs.

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: switching the Claude workflows to the existing API key secret.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch fix/claude-review-auth

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 Checkov (3.3.8)

.github/workflows/claude-code-review.yml

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

.github/workflows/claude.yml

Traceback (most recent call last):
File "/usr/local/bin/checkov", line 2, in
from checkov.main import Checkov
ModuleNotFoundError: No module named 'checkov'

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}