ClaudePull requestNot executed· 1 caveat

Agent approval check: require human approval on PRs with agent-authored commits

Sets a required status check that fails until a human approves any pull request containing agent-authored commits. It runs from the default branch, so a PR cannot edit the check to approve itself. Approvals are re-read on new pushes or an /approve comment.

pull_request_target: opened, synchronize, reopened, ready_for_review (re-checked on new PR replies)

Copy agent prompt Get the YAML Source ↗

How it works

From event to result

Trigger: GitHub starts a run when someone comments on an issue.
Agent: Claude Code, via anthropics/claude-code-action.
What it does: Sets a required status check that fails until a human approves any pull request containing agent-authored commits. It runs from the default branch, so a PR cannot edit the check to approve itself. Approvals are re-read on new pushes or an /approve comment.
What you get: This listing does not state a pull request or a comment. Read the prompt, and treat the result as not executed.

Setup

Where to paste this

Create .github/workflows/claude-code-action-agent-approval-check.yml
Paste the workflow below into that file. The notes beside the YAML are not part of the file.
This file does not name a repository secret. If the engine needs a credential, the name is not written here. Check that engine’s docs before you add one.

Let your agent do it

Copy a prompt for Claude Code, Codex, or Cursor.

Paste it into your coding agent in this repo. It does the setup and asks before anything leaves your machine.

Runs the same job in your agent session, on the plan you are signed in with. No API key, no Action.

Do the job of the "Agent approval check: require human approval on PRs with agent-authored commits" workflow from AgentFlows (https://agentflows.sh/flows/claude-code-action-agent-approval-check) right here, in this session, using the plan I'm signed in with. No API key and no GitHub Action.

What it does: Sets a required status check that fails until a human approves any pull request containing agent-authored commits. It runs from the default branch, so a PR cannot edit the check to approve itself. Approvals are re-read on new pushes or an /approve comment.

The workflow normally runs on: pull_request_target: opened, synchronize, reopened, ready_for_review (re-checked on new PR replies). Instead, ask me which pull request, issue, or branch to work on, then follow these instructions:

```text
Sets a required status check that fails until a human approves any pull request containing agent-authored commits. It runs from the default branch, so a PR cannot edit the check to approve itself. Approvals are re-read on new pushes or an /approve comment.
```

Use the gh CLI for anything on GitHub, and show me what you plan to post or change before you do it.

The file

Workflow YAML

Copy the file as-is. The notes beside each block explain it.

.github/workflows/claude-code-action-agent-approval-check.yml

File

The rest of the file, including the prompt the engine reads.

1# Require human approvals on PRs that contain agent-authored commits.2#3# Both triggers run the workflow file from the BASE/DEFAULT branch, so a PR4# cannot edit this check to approve itself. (`pull_request_review` is not5# used because it runs from the merge ref, not the default branch; native6# Approve reviews are picked up on the next synchronize or `/approve`7# comment.)8#9# After adding this workflow, mark `agent-approval-check` as a required10# status check on your protected branches.11

Name

The name GitHub shows in the Actions tab. The file path is under Where to paste this.

12name: agent-approval-check13

Trigger

GitHub starts a run when someone comments on an issue.

14on:15  pull_request_target:16    types: [opened, synchronize, reopened, ready_for_review]17  issue_comment:18    types: [created]19

Permissions

This token may read the repo, comment on pull requests and open them, and statuses: write. Anything not listed is not granted.

20permissions:21  contents: read22  pull-requests: write23  statuses: write24

Jobs

Each job is one runner. The steps inside it run top to bottom.

25jobs:26  check:27    # issue_comment also fires on plain issues; skip those early.28    if: github.event_name != 'issue_comment' || github.event.issue.pull_request29    runs-on: ubuntu-latest

Steps

These steps run in order on that job.

30    steps:

Agent

Runs Claude Code with anthropics/claude-code-action/agent-approval-check@main. Inputs: required_approvals; agent_emails; agent_logins.

31      - uses: anthropics/claude-code-action/agent-approval-check@main32        with:33          required_approvals: 234          agent_emails: noreply@anthropic.com35          agent_logins: claude[bot],claude-code[bot]36          # Uncomment to tune:37          # excluded_approvers: dependabot[bot]38          # exempt_path_prefixes: docs/39          # protected_bases: main,release

Keep going

More workflows

All workflows

ClaudePull request
01
Claude auto PR review
Copied from the official Solutions Guide basic example (prompt shortened).
pull_request: opened, synchronize
Est. cost per run~$0.18Checked Oct 16, 2026
Not executed
ClaudePull request
02
Claude PR review with progress tracking
`track_progress: true` posts a checkbox tracking comment (per Solutions Guide).
pull_request: opened, synchronize, ready_for_review, reopened
Est. cost per run~$0.22Checked Oct 16, 2026
Not executed
ClaudeComment
03
@claude mention assistant on issues and PRs
No `prompt` → the action runs in tag/interactive mode and responds to the comment. `trigger_phrase` default is `@claude` (usage.md).
issue_comment / pull_request_review_comment containing @claude
Est. cost per run~$0.27Checked Oct 16, 2026
Not executed· 1 caveat