ci: Enable unpriv user namespaces for claude-review

Required for bubblewrap to work properly.

diff --git a/.github/workflows/claude-review.yml b/.github/workflows/claude-review.yml
index 168e658e8a36865101f1807370106db507a11e15..926f28dd356af95b22b530d91fab5382f2429d60 100644 (file)
--- a/.github/workflows/claude-review.yml
+++ b/.github/workflows/claude-review.yml
@@ -163,7 +163,9 @@ jobs:
           name: pr-context.json
 
       - name: Install sandbox dependencies
-        run: sudo apt-get update && sudo apt-get install -y bubblewrap socat
+        run: |
+          sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0
+          sudo apt-get update && sudo apt-get install -y bubblewrap socat
 
       - name: Configure AWS credentials
         uses: aws-actions/configure-aws-credentials@8df5847569e6427dd6c4fb1cf565c83acfa8afa7