From e0f357330485823ec607620df147da588794e367 Mon Sep 17 00:00:00 2001
From: Kevin De Porre <kevin@electric-sql.com>
Date: Tue, 20 Jan 2026 09:40:32 +0100
Subject: [PATCH] Add bash and read permissions to /review workflow

---
 .github/workflows/review-pr-claude.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/review-pr-claude.yml b/.github/workflows/review-pr-claude.yml
index 7fb20b5a5..ff2ceed28 100644
--- a/.github/workflows/review-pr-claude.yml
+++ b/.github/workflows/review-pr-claude.yml
@@ -53,6 +53,7 @@ jobs:
           allowed_tools: 'Bash(gh pr *),Bash(gh api *),Bash(git diff *),Bash(git log *),Bash(git show *),Read,Glob,Grep,Task,Skill'
           claude_args: |
             --model claude-opus-4-5
+            --allowedTools Bash,Read
           prompt: |
             You are an autonomous PR review agent running in CI for this repository.