From f06106e32b3d44187dcfb0ceddf1ac1279074b60 Mon Sep 17 00:00:00 2001
From: TonyRL <TonyRL@users.noreply.github.com>
Date: Tue, 14 Jul 2026 23:53:46 +0800
Subject: [PATCH] chore: update allowed and disallowed tools for WebFetch based
 on event type

---
 .github/workflows/pr-review.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/pr-review.yml b/.github/workflows/pr-review.yml
index 176dd65bd..ba8cee0b2 100644
--- a/.github/workflows/pr-review.yml
+++ b/.github/workflows/pr-review.yml
@@ -90,8 +90,8 @@ jobs:
                   display_report: 'true'
                   claude_args: |
                       --model ${{ vars.OPENCODE_MODEL }}
-                      --allowedTools "Bash(base64:*),Bash(cat:*),Bash(echo:*),Bash(gh api:*),Bash(gh auth:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh repo view:*),Bash(gh search:*),Bash(git diff:*),Bash(git log:*),Bash(git show:*),Bash(git status:*),Bash(grep:*),Bash(head:*),Bash(ls:*),Bash(rg:*),Bash(sed:*),Bash(tail:*),Bash(wc:*),WebFetch(domain:docs.rsshub.app)"
-                      --disallowedTools "WebSearch"
+                      --allowedTools "Bash(base64:*),Bash(cat:*),Bash(echo:*),Bash(gh api:*),Bash(gh auth:*),Bash(gh pr comment:*),Bash(gh pr diff:*),Bash(gh pr view:*),Bash(gh repo view:*),Bash(gh search:*),Bash(git diff:*),Bash(git log:*),Bash(git show:*),Bash(git status:*),Bash(grep:*),Bash(head:*),Bash(ls:*),Bash(rg:*),Bash(sed:*),Bash(tail:*),Bash(wc:*),${{ github.event_name == 'workflow_dispatch' && 'WebFetch,WebSearch' || 'WebFetch(domain:docs.rsshub.app)' }}"
+                      ${{ github.event_name != 'workflow_dispatch' && '--disallowedTools "WebSearch"' || '' }}
                   prompt: |
                       A pull request has been created or updated in this repository.