Every run of claude-review.yml since at least 2026-09-03 ends with 5–28 permission denials and no formal APPROVE / REQUEST_CHANGES review. The agent reports on each PR (e.g. #462) that every gh Bash call and every mcp__github__* call was denied, and that it could only use the comment, inline-comment and CI MCP servers.
Confirmed so far:
mcp__github__pull_request_review_write in --allowedTools does not exist in the GitHub MCP server that claude-code-action v1.0.213 pins (ghcr.io/github/github-mcp-server:sha-23fa0dd, v0.17.1). That server exposes create_and_submit_pull_request_review, create_pending_pull_request_review, submit_pending_pull_request_review, get_pull_request_reviews, get_issue_comments. So the MCP path to a formal review was never available.- The Bash
gh rules reach the SDK intact (verified in the run's SDK options dump) yet the calls are still denied; root cause being confirmed via a debug re-run.
Net effect: the feedback loop in claude-pr-feedback.yml never fires, stale review comments accumulate, and every PR needs a manual approval.
Every run of
claude-review.ymlsince at least 2026-09-03 ends with 5–28 permission denials and no formal APPROVE / REQUEST_CHANGES review. The agent reports on each PR (e.g. #462) that everyghBash call and everymcp__github__*call was denied, and that it could only use the comment, inline-comment and CI MCP servers.Confirmed so far:
mcp__github__pull_request_review_writein--allowedToolsdoes not exist in the GitHub MCP server that claude-code-action v1.0.213 pins (ghcr.io/github/github-mcp-server:sha-23fa0dd, v0.17.1). That server exposescreate_and_submit_pull_request_review,create_pending_pull_request_review,submit_pending_pull_request_review,get_pull_request_reviews,get_issue_comments. So the MCP path to a formal review was never available.ghrules reach the SDK intact (verified in the run's SDK options dump) yet the calls are still denied; root cause being confirmed via a debug re-run.Net effect: the feedback loop in
claude-pr-feedback.ymlnever fires, stale review comments accumulate, and every PR needs a manual approval.