From b54d61e00b4493606c3c2d9ec5cdbb15f07018be Mon Sep 17 00:00:00 2001 From: Daan De Meyer Date: Tue, 17 Mar 2026 19:46:31 +0100 Subject: [PATCH] ci: Fix allowed tools in claude-review Bash(gh:api *) wasn't actually working. Turns out the colon syntax is deprecated and unnecessary. Let's stop using it which also fixes the bug so that gh api calls are allowed now. --- .github/workflows/claude-review.yml | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml index 05c1e3eb5f..6860380fd8 100644 --- a/.github/workflows/claude-review.yml +++ b/.github/workflows/claude-review.yml @@ -195,10 +195,10 @@ jobs: --max-turns 100 --allowedTools " Read,LS,Grep,Glob,Task,TaskStop, - Bash(cat:*),Bash(test:*),Bash(printf:*),Bash(jq:*),Bash(head:*),Bash(tail:*), - Bash(git:*),Bash(grep:*),Bash(find:*),Bash(ls:*),Bash(wc:*), - Bash(gh:api *), - Bash(diff:*),Bash(sed:*),Bash(awk:*),Bash(sort:*),Bash(uniq:*), + Bash(cat *),Bash(test *),Bash(printf *),Bash(jq *),Bash(head *),Bash(tail *), + Bash(git *),Bash(grep *),Bash(find *),Bash(ls *),Bash(wc *), + Bash(gh api *), + Bash(diff *),Bash(sed *),Bash(awk *),Bash(sort *),Bash(uniq *), " --json-schema '${{ env.REVIEW_SCHEMA }}' prompt: |