Claude Code GitHub Actions 使用教程

name: Claude Code

on:
  issue_comment:
    types: [created]
  pull_request_review_comment:
    types: [created]
  issues:
    types: [opened, assigned]
  pull_request_review:
    types: [submitted]

jobs:
  claude:
    if: |
      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude')) ||
      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude')) ||
      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude')) ||
      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')))
    runs-on: ubuntu-latest
    permissions:
      contents: write
      pull-requests: write
      issues: write
      id-token: write
    env:
      ANTHROPIC_BASE_URL: http://127.0.0.1:8788
    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 1

      - name: Start AceData Cloud proxy (x-api-key → Bearer)
        env:
          UPSTREAM: https://api.acedata.cloud
          ACEDATA_TOKEN: ${{ secrets.ANTHROPIC_AUTH_TOKEN }}
        run: |
          cat > /tmp/proxy.py <<'PY'
          import http.server, socketserver, urllib.request, urllib.error, os
          UPSTREAM = os.environ["UPSTREAM"].rstrip("/")
          TOKEN = os.environ["ACEDATA_TOKEN"]
          HOP = {"host", "content-length", "connection", "keep-alive",
                 "proxy-authenticate", "proxy-authorization", "te",
                 "trailers", "transfer-encoding", "upgrade"}

          class H(http.server.BaseHTTPRequestHandler):
              protocol_version = "HTTP/1.1"

              def _proxy(self, method):
                  body = self.rfile.read(int(self.headers.get("Content-Length") or 0)) \
                      if method in ("POST", "PUT", "PATCH") else None
                  req = urllib.request.Request(UPSTREAM + self.path, data=body, method=method)
                  for k, v in self.headers.items():
                      if k.lower() in HOP or k.lower() in ("authorization", "x-api-key"):
                          continue
                      req.add_header(k, v)
                  req.add_header("Authorization", f"Bearer {TOKEN}")
                  try:
                      resp = urllib.request.urlopen(req, timeout=600)
                      data, code, headers = resp.read(), resp.status, resp.headers
                  except urllib.error.HTTPError as e:
                      data, code, headers = e.read(), e.code, e.headers
                  self.send_response(code)
                  for k, v in headers.items():
                      if k.lower() in HOP:
                          continue
                      self.send_header(k, v)
                  self.send_header("Content-Length", str(len(data)))
                  self.end_headers()
                  self.wfile.write(data)

              def do_GET(self): self._proxy("GET")
              def do_POST(self): self._proxy("POST")
              def do_PUT(self): self._proxy("PUT")
              def do_DELETE(self): self._proxy("DELETE")
              def log_message(self, *a, **k): pass

          class T(socketserver.ThreadingMixIn, http.server.HTTPServer):
              daemon_threads = True
              allow_reuse_address = True

          T(("127.0.0.1", 8788), H).serve_forever()
          PY
          nohup python3 /tmp/proxy.py > /tmp/proxy.log 2>&1 &
          for i in $(seq 1 20); do
            curl -sS -o /dev/null http://127.0.0.1:8788/ && break
            sleep 0.3
          done

      - name: Run Claude Code via AceData Cloud
        uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: dummy-not-used
          github_token: ${{ secrets.GITHUB_TOKEN }}
          claude_args: |
            --model claude-opus-4-8
          show_full_output: 'true'

GitHub Issue / PR comment 含 @claude
  └─→ GitHub Actions 触发 .github/workflows/claude.yml
        ├─ Step 1: 启动本地代理 127.0.0.1:8788
        └─ Step 2: anthropics/claude-code-action@v1
              └─→ Claude Code CLI 把 ANTHROPIC_BASE_URL 当成 Anthropic API
                    └─→ 请求落到本地代理（自带 x-api-key=dummy-not-used）
                          └─→ 代理替换为 Authorization: Bearer <ANTHROPIC_AUTH_TOKEN>
                                └─→ 转发到 https://api.acedata.cloud
                                      └─→ Claude Opus 4.8 实际推理
              └─→ Claude 在仓库里读代码 / 写代码 / 评论 / 提 PR

      - name: Run Claude Code via AceData Cloud
        uses: anthropics/claude-code-action@v1
        with:
          anthropic_api_key: dummy-not-used
          github_token: ${{ secrets.GITHUB_TOKEN }}
          claude_args: |
            --model claude-sonnet-4-5
            --max-turns 8
          show_full_output: 'true'

gh secret set ANTHROPIC_AUTH_TOKEN --repo <org>/<repo> --body '<your-real-token>'