k.rennerandClaude Opus 4.7
e912dea9e5
ci/woodpecker/manual/security-scan Pipeline failed
Pipeline 849's agent step failed at "Not logged in · Please run /login" despite CLAUDE_CODE_OAUTH_TOKEN being correctly injected from the Woodpecker secret. Per Claude Code's authentication.md: "Bare mode does not read CLAUDE_CODE_OAUTH_TOKEN. If your script passes --bare, authenticate with ANTHROPIC_API_KEY or an apiKeyHelper instead." The headless guide had recommended --bare for CI, but didn't flag this incompatibility with subscription auth. We use the subscription-backed OAuth token, not an API key, so --bare is the wrong choice here. Trade-off: without --bare, claude loads its default config (CLAUDE.md, hooks, MCP, skills) on startup. None of those are present in the ci-claude image's HOME so the loss is theoretical for now, but if any of them get added we'd need to revisit. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>