# CC CLI install on GitHub Actions — broken vs. fixed

Why every `claude` invocation in cc-triage fast-failed in run `25443026871`, and what the fix changes. Toggle to see each install command's outcome.

### Install command

### What `claude -p` sees

## Workflow inventory 5 files use claude-code

Workflow | --ignore-scripts | install.cjs | Before | After
--- | --- | --- | --- | ---
claude-release-watch.yml | yes | added | parse_failed cascade | extracts features
claude-health.yml | yes | added | claude -p 1 | runs assessment
orchestkit-eval.yml | yes | added | eval -p --bare 1 | eval runs
plugin-validation.yml | yes | added | silently skipped | validates
ultrareview.yml | no | n/a | already correct | unchanged

## Why this fix is safe

- + Re-running `install.cjs` is the package's own postinstall script — same code, same trust boundary.
- + `--ignore-scripts` stays on, so transitive postinstalls from other deps remain blocked (Scorecard #130, #132).
- i The error message itself instructs this exact path: `node node_modules/@anthropic-ai/claude-code/install.cjs`.
- + A regression test (`tests/integration/test-cc-cli-install-pattern.sh`) fails if a workflow drops the install.cjs line.