Skip to content
Merged
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 3 additions & 2 deletions .github/workflows/claude.yml
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,8 @@ jobs:

- name: Run Claude Code
id: claude
uses: anthropics/claude-code-action@beta
uses: anthropics/claude-code-action@v1
with:
anthropic_api_key: ${{ secrets.GH_ANTHROPIC_API_KEY }}
allowed_tools: "Bash(git:*),View,GlobTool,GrepTool,BatchTool"
claude_args: |
Comment thread
cubic-dev-ai[bot] marked this conversation as resolved.
--allowedTools "Bash(git:*),Read,Glob,Grep"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: In Claude Code CLI v1, file editing moved from the beta-era BatchTool to a dedicated Edit tool. The updated allowed-tools list keeps Bash(git:*) (restricting shell to git commands only), Read, Glob, and Grep but omits Edit. Without Edit, Claude cannot write or modify files during a session, which limits it to read-only analysis. If the workflow intends Claude to make code changes (triggered by @claude), add Edit to the allowed tools list. If read-only is the intended scope, the current list is correct.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At .github/workflows/claude.yml, line 38:

<comment>In Claude Code CLI v1, file editing moved from the beta-era `BatchTool` to a dedicated `Edit` tool. The updated allowed-tools list keeps `Bash(git:*)` (restricting shell to git commands only), `Read`, `Glob`, and `Grep` but omits `Edit`. Without `Edit`, Claude cannot write or modify files during a session, which limits it to read-only analysis. If the workflow intends Claude to make code changes (triggered by `@claude`), add `Edit` to the allowed tools list. If read-only is the intended scope, the current list is correct.</comment>

<file context>
@@ -35,4 +35,4 @@ jobs:
           anthropic_api_key: ${{ secrets.GH_ANTHROPIC_API_KEY }}
           claude_args: |
-            --allowedTools "Bash(git:*),View,GlobTool,GrepTool,BatchTool"
+            --allowedTools "Bash(git:*),Read,Glob,Grep"
</file context>
Suggested change
--allowedTools "Bash(git:*),Read,Glob,Grep"
--allowedTools "Bash(git:*),Read,Edit,Glob,Grep"

Loading