Claude Code 가이드 #15 — Code Review 자동화

로컬에서 claude review 실행
# 현재 브랜치의 변경 사항 리뷰
claude review

# 특정 파일만 리뷰
claude review src/auth/login.ts

# 특정 커밋 범위 리뷰
claude review HEAD~3..HEAD

# main 브랜치 대비 전체 diff 리뷰
claude review main..HEAD

.github/workflows/claude-review.yml — 기본 설정
name: Claude Code Review

on:
  pull_request:
    types: [opened, synchronize, reopened]

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write

    steps:
      - name: Checkout code
        uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Setup Node.js
        uses: actions/setup-node@v4
        with:
          node-version: '20'

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Run Claude Review
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          claude review \
            --base ${{ github.event.pull_request.base.sha }} \
            --head ${{ github.event.pull_request.head.sha }} \
            --output github-pr-comment

.claude/review.json — 커스텀 리뷰 규칙 예시
{
  "review": {
    "focus": ["security", "performance", "correctness"],
    "ignore": ["style", "formatting"],
    "rules": {
      "no-hardcoded-secrets": "error",
      "no-console-log": "warn",
      "require-error-handling": "error",
      "max-function-lines": 50
    },
    "exclude": [
      "**/*.test.ts",
      "**/*.spec.js",
      "dist/**",
      "node_modules/**"
    ],
    "language-specific": {
      "typescript": {
        "strict-types": true,
        "no-any": "warn"
      },
      "python": {
        "type-hints": "warn"
      }
    }
  }
}

증분 리뷰 — synchronize 이벤트에서만 새 커밋 리뷰
name: Claude Code Review (Incremental)

on:
  pull_request:
    types: [opened, synchronize]

jobs:
  review:
    runs-on: ubuntu-latest
    permissions:
      contents: read
      pull-requests: write

    steps:
      - uses: actions/checkout@v4
        with:
          fetch-depth: 0

      - name: Get changed files
        id: changed-files
        uses: tj-actions/changed-files@v44

      - name: Install Claude Code
        run: npm install -g @anthropic-ai/claude-code

      - name: Run incremental review
        if: steps.changed-files.outputs.any_changed == 'true'
        env:
          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
        run: |
          echo "${{ steps.changed-files.outputs.all_changed_files }}" | \
          xargs claude review --output github-pr-comment

보안 이슈 발견 시 CI 실패 처리
- name: Run security-focused review
  env:
    ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
  run: |
    REVIEW_RESULT=$(claude review \
      --focus security \
      --severity-threshold high \
      --output json)

    echo "$REVIEW_RESULT" | jq '.issues[] | select(.severity == "critical" or .severity == "high")' > critical_issues.json

    if [ -s critical_issues.json ]; then
      echo "Critical security issues found:"
      cat critical_issues.json
      exit 1  # CI 실패 처리
    fi

    echo "No critical security issues found."