mirror of
https://github.com/tiennm99/ccs.git
synced 2026-07-16 00:22:34 +00:00
--allowedTools is an approval list (skip permission prompts), redundant with bypassPermissions. --tools is the actual availability whitelist. Also simplified tool list: Bash sub-patterns (gh pr diff *, etc.) aren't supported by --tools. The workflow token has contents:read only, so the agent physically cannot push/delete/modify the repo even with full Bash.