From e12afa225dae935cc83b6cc96943364d18e60888 Mon Sep 17 00:00:00 2001
From: Tony <TonyRL@users.noreply.github.com>
Date: Wed, 13 May 2026 23:33:37 +0800
Subject: [PATCH] chore: update permissions to allow additional shell commands
 in PR review workflow

---
 .github/workflows/pr-review.yml | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml
index 213d6f9f9..9befc89a1 100644
--- a/.github/workflows/pr-review.yml
+++ b/.github/workflows/pr-review.yml
@@ -89,7 +89,14 @@ jobs:
                           "*": "deny",
                           "gh auth*": "allow",
                           "gh pr*": "allow",
-                          "gh api*": "allow"
+                          "gh api*": "allow",
+                          "grep*": "allow",
+                          "git*": "allow",
+                          "ls*": "allow",
+                          "sed*": "allow",
+                          "cat*": "allow",
+                          "echo*": "allow",
+                          "head*": "allow",
                         },
                         "webfetch": "deny"
                       }