Automation, CI/CD & Headless Patterns

#!/bin/bash
# scripts/ai-review.sh
set -euo pipefail

DIFF=$(git diff origin/main...HEAD)
[ -z "$DIFF" ] && { echo "no changes"; exit 0; }

REVIEW=$(echo "$DIFF" | claude -p \
  "Review this diff. Format: [SEVERITY: HIGH|MEDIUM|LOW] desc (file:line)" \
  --output-format text \
  --allowedTools "Read,Bash(git log *)")

echo "$REVIEW" > "review-$(date +%Y%m%d-%H%M%S).md"
echo "$REVIEW"

# Gate the pipeline
if echo "$REVIEW" | grep -q "SEVERITY: HIGH"; then
  echo "high-severity findings, blocking"
  exit 1
fi

# .github/workflows/claude-review.yml
name: Claude PR Review
on:
  pull_request:
    types: [opened, synchronize]

permissions:
  contents: read
  pull-requests: write

jobs:
  review:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4
        with: { fetch-depth: 0 }

      - uses: actions/setup-node@v4
        with: { node-version: '22' }

      - run: npm install -g @anthropic-ai/claude-code

      - name: Run Claude review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
        run: |
          git diff origin/main...HEAD | claude -p \
            "Review for bugs, security, missing tests. Markdown output." \
            --output-format text \
            --allowedTools "Read,Bash(git log *),Bash(git show *)" \
            > review.md

      - uses: actions/github-script@v7
        with:
          script: |
            const fs = require('fs');
            const review = fs.readFileSync('review.md', 'utf8');
            github.rest.issues.createComment({
              owner: context.repo.owner,
              repo: context.repo.repo,
              issue_number: context.issue.number,
              body: '## Claude Code Review\n\n' + review
            });