diff options
| author | hathach <[email protected]> | 2026-06-30 16:45:34 +0700 |
|---|---|---|
| committer | hathach <[email protected]> | 2026-06-30 16:45:34 +0700 |
| commit | c52a4a37f0505bb020dd4f121dfe3908b8b30783 (patch) | |
| tree | 9375afc002b7432028fc58b3ab885606668fd90f /SConscript | |
| parent | da41189467c00e339b89f722b6c6e24e4481b288 (diff) | |
ci(claude-review): allowlist the tools /code-review needs
The auto-review job runs /code-review headless, which uses Bash (git diff, gh),
file search, and Task (it fans out sub-agent reviewers). None were allowlisted,
so every such call stalled on a per-tool approval prompt and the review couldn't
gather the diff or spawn reviewers. Add --allowedTools.
Safe here (unlike claude.yml): this job is gated to same-repo PRs and its token
is contents:read, so it cannot push. Bash is broad — scope to git/gh/grep if
preferred.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Diffstat (limited to 'SConscript')
0 files changed, 0 insertions, 0 deletions