consumer-claude-code: mention-only triggers (propagated from template)

[assisted-by-ai]

Byte-identical propagation of consumer-claude-code.yml from developer-meta-files/consumer-templates, paired with org-ai-assisted/developer-meta-files#165.

pull_request and workflow_dispatch resolve to claude-code-action's agent mode, whose trigger condition is a non-empty prompt input. This workflow passes no prompt, so those events could only spin up a runner and exit without calling the model:

Auto-detected mode: agent for event: pull_request
Context prompt: NO PROMPT
Trigger result: false
No trigger found, skipping remaining steps

The result was a green "Claude Code Review" check on every PR that had reviewed nothing. Triggers are now comment-only, which is the only path that ever reached the model.

Merge order does not matter: the reusable's job-level if: no longer accepts pull_request, so once Kicksecure#165 lands these repos stop producing misleading green checks either way. This PR removes the pointless runs entirely.

Generated with assistance from Claude Code.

Summary by CodeRabbit

• Improvements
  • Updated the automated code review workflow to run only on comment-triggered events (issue comments and pull request review comments).
  • Removed automatic execution from pull request events and manual workflow dispatches.
  • Simplified the trigger behavior so reviews start when the designated callout is included in the comment.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: fa0d9f31-2c05-4e62-bbf8-101b1ad74320

📥 Commits

Reviewing files that changed from the base of the PR and between 5daefde and e8e9fd4.

📒 Files selected for processing (1)

• .github/workflows/consumer-claude-code.yml

🚧 Files skipped from review as they are similar to previous changes (1)

• .github/workflows/consumer-claude-code.yml

---

📝 Walkthrough

Walkthrough

The Claude Code Review workflow now responds only to created comment events, runs when the comment contains @claude, preserves bot-versus-human concurrency handling, and continues invoking the reusable workflow with the OAuth token.

Changes

Claude review workflow

Layer / File(s)	Summary
Comment-driven review execution .github/workflows/consumer-claude-code.yml	The workflow now listens only to created issue comments and pull request review comments, updates concurrency documentation, gates the job on @claude in the comment body, and preserves reusable workflow invocation with OAuth token forwarding.

Estimated code review effort: 2 (Simple) | ~10 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the workflow's shift to comment-only triggers and stays focused on the main change.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch ai-claude-review-mention-only

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}