From 4d37a200c65c008e1a81043b48c0be5873cab76b Mon Sep 17 00:00:00 2001
From: pendingintent <3921919+pendingintent@users.noreply.github.com>
Date: Wed, 7 Oct 2026 15:20:01 -0600
Subject: [PATCH] Allow claude-review to post inline PR comments

The action runs with a restricted tool set, so the review's inline
comment and gh pr calls were denied (permission_denials_count: 4) and
nothing was posted. Add the tools via --allowedTools and drop the
show_full_output debugging flag.
---
 .github/workflows/claude-review.yml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index a98e7da..d81fc67 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -23,7 +23,9 @@ jobs:
         uses: anthropics/claude-code-action@v1
         with:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
-          claude_args: --model claude-sonnet-5
+          claude_args: |
+            --model claude-sonnet-5
+            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
           prompt: |
             Review this pull request and post inline comments for:
             1. Logic errors and edge cases