docs: update snapshotter role permissions - allow environment creation #180
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Doc Review | |
| on: | |
| pull_request: | |
| types: | |
| - opened | |
| - reopened | |
| - synchronize | |
| paths: | |
| - '**/*.md' | |
| - '**/*.mdx' | |
| - 'config/navigation.json' | |
| - 'docs.json' | |
| # Cancel any in-flight review when a new commit is pushed to the PR. The | |
| # sticky comment then reflects only the latest PR head, not intermediate | |
| # states. | |
| concurrency: | |
| group: doc-review-${{ github.event.pull_request.number }} | |
| cancel-in-progress: true | |
| jobs: | |
| doc-review: | |
| name: Doc quality review | |
| runs-on: ubuntu-latest | |
| timeout-minutes: 30 | |
| permissions: | |
| contents: read | |
| pull-requests: write | |
| id-token: write # required: used to fetch the GitHub OIDC token | |
| steps: | |
| - name: Harden Runner | |
| uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0 | |
| with: | |
| egress-policy: audit | |
| - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0 | |
| with: | |
| fetch-depth: 0 | |
| - name: Run Claude doc review | |
| uses: anthropics/claude-code-action@b76a0776ae74036e77cd11018083743453d7ad35 # v1.0.179 | |
| env: | |
| GH_TOKEN: ${{ github.token }} | |
| with: | |
| allowed_bots: "mintlify,github-actions" | |
| anthropic_federation_rule_id: ${{ vars.ANTHROPIC_FEDERATION_RULE_ID }} | |
| anthropic_organization_id: ${{ vars.ANTHROPIC_ORGANIZATION_ID }} | |
| anthropic_service_account_id: ${{ vars.ANTHROPIC_SERVICE_ACCOUNT_ID }} | |
| track_progress: true | |
| use_sticky_comment: true | |
| # The `doc-review` skill is defined locally in | |
| # `.claude/skills/doc-review/SKILL.md` and is picked up automatically | |
| # from the checked-out repo. | |
| # --allowedTools is a whitelist - the agent can ONLY use these tools | |
| # plus the implicit Read/Grep/Glob set. Bash is scoped to the minimum | |
| # gh subcommands needed to read PR context and post comments. | |
| claude_args: | | |
| --max-turns 30 | |
| --model claude-opus-4-6 | |
| --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)" | |
| prompt: | | |
| REPO: ${{ github.repository }} | |
| PR NUMBER: ${{ github.event.pull_request.number }} | |
| You are reviewing a pull request to the Kosli docs site. Follow | |
| the `doc-review` skill (defined in `.claude/skills/doc-review/SKILL.md`) | |
| and the rules in this repo's CLAUDE.md. | |
| Scope: only the docs files (.md, .mdx, config/navigation.json, | |
| docs.json) changed in this PR. Use `gh pr diff` to discover them. | |
| Constraints: | |
| - Read each changed file and CLAUDE.md before commenting. | |
| - If a new page was added, verify it is also listed in | |
| `config/navigation.json`. Flag as Critical if missing. | |
| - Flag relative links (e.g. `../foo`) as Critical - they must be | |
| root-relative. | |
| - Be concise. Group findings by file. Use the doc-reviewer agent's | |
| Critical / Improvement / Suggestion categories. | |
| - This review is advisory: do not request changes or approve. | |
| Note: The PR branch is already checked out in the current working | |
| directory. | |
| Use `gh pr comment` for top-level feedback. | |
| Use `mcp__github_inline_comment__create_inline_comment` to highlight | |
| specific issues on individual lines. | |
| Only post GitHub comments - don't submit review text as messages. |