From 2e676fd636f4f7c1b999fd9a369d6e71b971c30e Mon Sep 17 00:00:00 2001
From: Daan De Meyer <daan@amutable.com>
Date: Wed, 18 Mar 2026 12:30:41 +0100
Subject: [PATCH] ci: Allow all commands in claude-review workflow

claude is asking for permissions in the logs, let's grant it access
to execute all commands to avoid the permission denials.
---
 .github/workflows/claude-review.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 926f28dd35..1933095b0c 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -241,6 +241,9 @@ jobs:
           # filesystem writes to the working directory.
           settings: |
             {
+              "permissions": {
+                "allow": ["*"]
+              },
               "sandbox": {
                 "enabled": true,
                 "autoAllowBashIfSandboxed": true,