catspeed-cc/openwrt
1
1
Fork 0
Code

github: prevent Claude from making commits during PR review

Browse Source 
The workflow already uses contents: read which prevents GitHub from
accepting any push. The --disallowedTools setting adds a second layer
by stopping Claude from even attempting git write operations.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/22897
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
This commit is contained in:
Hauke Mehrtens 2026-04-11 18:06:40 +02:00
parent 4517acedb5
commit 05e111aa42
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
.github/workflows/claude-code-review.yml vendored
View File

@ -33,3 +33,4 @@ jobs:
trigger_phrase: "/claude"
claude_args: >-
--allowedTools "mcp__github_inline_comment__create_inline_comment"
--disallowedTools "Bash(git add:*),Bash(git commit:*),Bash(git rm:*),Bash(git push:*)"