diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 926f28dd35..1933095b0c 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -241,6 +241,9 @@ jobs:
           # filesystem writes to the working directory.
           settings: |
             {
+              "permissions": {
+                "allow": ["*"]
+              },
               "sandbox": {
                 "enabled": true,
                 "autoAllowBashIfSandboxed": true,