diff --git a/README.md b/README.md index 972ed5f..b0be031 100644 --- a/README.md +++ b/README.md @@ -46,7 +46,8 @@ jobs: | Input | Description | Default | Required | |-------|-------------|---------|----------| -| `claude-api-key` | Anthropic Claude API key for security analysis | None | Yes | +| `claude-api-key` | Anthropic Claude API key for security analysis | None | No | +| `claude-code-oauth-token` | Claude Code OAuth token (alternative to claude-api-key) | None | No | | `comment-pr` | Whether to comment on PRs with findings | `true` | No | | `upload-results` | Whether to upload results as artifacts | `true` | No | | `exclude-directories` | Comma-separated list of directories to exclude from scanning | None | No | diff --git a/action.yml b/action.yml index 3c8f3ff..c97e920 100644 --- a/action.yml +++ b/action.yml @@ -25,9 +25,13 @@ inputs: claude-api-key: description: 'Anthropic Claude API key for security analysis' - required: true + required: false default: '' + claude-code-oauth-token: + description: "Claude Code OAuth token (alternative to claude-api-key)" + required: false + claude-model: description: 'Claude model to use for security analysis (e.g., claude-3-sonnet-20240229)' required: false @@ -170,6 +174,7 @@ runs: GITHUB_REPOSITORY: ${{ github.repository }} PR_NUMBER: ${{ github.event.pull_request.number }} ANTHROPIC_API_KEY: ${{ inputs.claude-api-key }} + CLAUDE_CODE_OAUTH_TOKEN: ${{ inputs.claude-code-oauth-token }} ENABLE_CLAUDE_FILTERING: 'true' EXCLUDE_DIRECTORIES: ${{ inputs.exclude-directories }} FALSE_POSITIVE_FILTERING_INSTRUCTIONS: ${{ inputs.false-positive-filtering-instructions }} @@ -202,6 +207,7 @@ runs: echo "Python version: $(python --version)" echo "Claude CLI version: $(claude --version 2>&1 || echo 'Claude CLI not found')" echo "ANTHROPIC_API_KEY set: $(if [ -n "$ANTHROPIC_API_KEY" ]; then echo 'Yes'; else echo 'No'; fi)" + echo "CLAUDE_CODE_OAUTH_TOKEN set: $(if [ -n "CLAUDE_CODE_OAUTH_TOKEN" ]; then echo 'Yes'; else echo 'No'; fi)" echo "GITHUB_REPOSITORY: $GITHUB_REPOSITORY" echo "PR_NUMBER: $PR_NUMBER" echo "Python path: $PYTHONPATH"