Github actions and code review

CodeReview (Managed Service)

• Anthropic-hosted PR review service that posts findings as inline comments
• No setup or hosting required
• Available for team and enterprise plans (research preview)
• Never approves or blocks PRs—human judgment remains final
• Deduplicates and ranks findings to avoid overwhelming developers
• Posts findings only; fixes applied locally via slash code review --fix command

Cloud Code GitHub Action (DIY Approach)

• For jobs beyond review: implementing changes, scheduled reports, custom CI workflows
• Runs on Anthropic infrastructure triggered by PR comments, scheduled jobs, or any GitHub event
• Requires repo admin to install via slash install github. app command
• Sets up GitHub app and Anthropic API key secret on the repository

Action Configuration

• Trigger phrase: defaults to @cloud in comments
• Inputs: Anthropic API key (required), GitHub token, trigger phrase, prompt/instructions, cloud arguments
• Providers: Supports Anthropic, Bedrock, or Vertex
• Fine-tuning: cloud args parameter passes CLI arguments for control (e. g. , max turns, permission mode)

Common Workflow Patterns

• PR reviews: Listen for @cloud mentions on pull requests and issue comments
• Scheduled reports: Use cron triggers (e. g. , daily rollup at 9 UTC)
• Manual runs: Workflow dispatch from GitHub Actions tab

Key Settings

• max turns: Hard cap on agent loop iterations
• permission mode: don't ask = unattended mode
• allow tools: Specify exact tools needed (read-only for reports, broader for implementations)

Takeaways

• CodeReview is a managed service that posts inline PR comments without approving/blocking; Cloud Code GitHub Action enables custom CI workflows beyond review
• GitHub Action runs on Anthropic infrastructure triggered by PR comments, scheduled jobs, or GitHub events; requires repo admin setup via slash install github. app
• Action is configured with trigger phrase (defaults to @cloud), API key, and cloud arguments like max turns and permission mode to control agent behavior
• Common patterns include PR reviews on @cloud mentions, scheduled reports via cron, and manual workflow dispatch
• allow tools parameter restricts which tools the agent can use (read-only for reports, broader for implementations)