chore: update permissions to allow additional shell commands in PR review workflow

2026-05-13 23:33:37 +08:00 · 2026-05-13 23:33:37 +08:00 · e12afa225d
parent eda21bb48c
commit e12afa225d
1 changed files with 8 additions and 1 deletions
--- a/.github/workflows/pr-review.yml
+++ b/.github/workflows/pr-review.yml
@ -89,7 +89,14 @@ jobs:
                          "*": "deny",
                          "gh auth*": "allow",
                          "gh pr*": "allow",
-                          "gh api*": "allow"
+                          "gh api*": "allow",
+                          "grep*": "allow",
+                          "git*": "allow",
+                          "ls*": "allow",
+                          "sed*": "allow",
+                          "cat*": "allow",
+                          "echo*": "allow",
+                          "head*": "allow",
                        },
                        "webfetch": "deny"
                      }