github: add actions: read permission for CI status in claude-code-review

The claude-code-action uses mcp__github_ci__get_ci_status and related
tools to check workflow run status as part of the review. Without
actions: read the GitHub API calls for CI status are rejected.

Fixes: c0e75c9de6f2 ("github: add Claude code review workflow triggered by /claude comment")
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>

diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index df19bcd290d72a84949617a85c5f39842172afc5..13f1dddb6460e19d6e32e3b17fcc895b0ac36ca8 100644 (file)
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -7,6 +7,7 @@ on:
 permissions:
   contents: read
   pull-requests: write
+  actions: read
 
 jobs:
   code-review: