Activity

Summary

• Changed --allowedTools from "Bash,..." to "Bash(gh:*),Bash(npm:*),Bash(composer:*)"
• The action requires specific Bash commands to be explicitly allowed
• Bash(gh:*) enables all gh CLI commands so Claude can create PRs with gh pr create

Context

Previous attempt used --allowedTools "Bash,..." but the action filters out unrestricted Bash access for security. The correct pattern is Bash(command:*) to allow specific command families.

Test plan

• Merge this PR
• Comment @claude on issue #24 to test PR creation
• Verify Claude uses gh pr create instead of providing a link

Stu Mason + AI [email protected]