Claude Code GitHub App not responding to @claude review on PRs

Bug Description

The official Claude Code GitHub App is installed and configured, but does not respond to comments on pull requests. No check runs are created, no reviews are posted, and no bot activity is observed.

Additionally, the Claude Code Action running on this repo (anthropics/claude-code) fails with a 401 for external contributors when triggered by issue titles containing :

Setup

• Official Claude Code GitHub App installed via GitHub Settings
• Installation scope: All repositories
• Installation ID: 117069552
• Permissions verified:
• Read access to actions and metadata
• Read and write access to checks, code, discussions, issues, pull requests, and workflows
• Private repository on a personal GitHub account

Steps to Reproduce

1. Create a PR on a private repo where the Claude Code GitHub App is installed
2. Comment on the PR
3. Wait for a response

Expected Behavior

Claude Code should post a code review on the PR, and/or a check run should appear.

Actual Behavior

• Zero response from the bot
• Zero check runs created on the PR head commit
• Zero reviews posted
• No bot activity in repo events at all
• The comment has been sitting for 30+ minutes with no reaction

Diagnostics

• Verified via API that the Claude Code app has pull_requests: write permission
• Check runs API returns total_count: 0 for the PR head commit
• Reviews API returns empty array
• Repo events show zero activity from any bot account
• GitHub App installation page shows correct permissions and repo access
• Cannot access Recent Deliveries in the new GitHub Settings UI to verify webhook delivery

Claude Code Action Log (from anthropics/claude-code workflow)

When this issue triggered the Claude Code Action on this repo, the following error occurred:

This suggests the OIDC-to-app-token exchange does not work for external contributors.

Environment

• GitHub account type: Personal
• Repository visibility: Private

Notes

• The new GitHub Settings UI does not seem to expose the "Advanced > Recent Deliveries" section for installed apps, making it impossible to self-diagnose webhook delivery issues.
• All permissions appear correct (pull_requests: write, contents: write, etc.) so this does not appear to be a permissions issue.