From: Hauke Mehrtens <hauke@hauke-m.de>
Date: Sat, 11 Apr 2026 22:04:33 +0000 (+0200)
Subject: github: allow grep in claude code review
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a41cd892b7c5d0405fd352ced5099f8e3a6ccfa8;p=thirdparty%2Fopenwrt.git

github: allow grep in claude code review

Allow Bash(grep:*) so Claude can search the codebase for context
during PR reviews. Without this, grep calls using shell glob patterns
were denied even though plain directory greps were allowed.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Link: https://github.com/openwrt/openwrt/pull/22897
Signed-off-by: Hauke Mehrtens <hauke@hauke-m.de>
---

diff --git a/.github/workflows/claude-code-review.yml b/.github/workflows/claude-code-review.yml
index 6115d33428e..d53f085f225 100644
--- a/.github/workflows/claude-code-review.yml
+++ b/.github/workflows/claude-code-review.yml
@@ -32,5 +32,5 @@ jobs:
           github_token: ${{ secrets.GITHUB_TOKEN }}
           trigger_phrase: "/claude"
           claude_args: >-
-            --allowedTools "mcp__github_inline_comment__create_inline_comment"
+            --allowedTools "mcp__github_inline_comment__create_inline_comment,Bash(grep:*)"
             --disallowedTools "Bash(git add:*),Bash(git commit:*),Bash(git rm:*),Bash(git push:*)"