From 1eaf3104c8a0d8a547e253d51df802b9c8dca099 Mon Sep 17 00:00:00 2001
From: pendingintent <3921919+pendingintent@users.noreply.github.com>
Date: Wed, 7 Oct 2026 15:44:30 -0600
Subject: [PATCH] Let claude-review read code and skip generated files

The restricted --allowedTools list omitted read tools, so the review hit
permission denials and posted nothing. Add Read/Glob/Grep and read-only
git commands, and tell the prompt to skip generated output.
---
 .github/workflows/claude-review.yml | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index d81fc67..b9066d7 100644
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -25,7 +25,7 @@ jobs:
           anthropic_api_key: ${{ secrets.ANTHROPIC_API_KEY }}
           claude_args: |
             --model claude-sonnet-5
-            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
+            --allowedTools "mcp__github_inline_comment__create_inline_comment,Read,Glob,Grep,Bash(git diff:*),Bash(git log:*),Bash(git show:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*)"
           prompt: |
             Review this pull request and post inline comments for:
             1. Logic errors and edge cases
@@ -35,3 +35,4 @@ jobs:
             5. Missing unit tests
             6. Non conformance with USDM v4.0 schema (schema/dataStructure.yml)
             Focus on changed files only, Be specific - cite line numbers
+            Skip generated files: output/json/*, *.db, and lock files.