wip

Signed-off-by: Joe Isaacs <[email protected]>

Author: joseph-isaacs

.github/workflows/fuzz.yml

@@ -111,6 +111,7 @@ jobs:
       issues: write
       contents: read
       id-token: write  # Required for Claude Code Action OIDC authentication
+      pull-requests: read  # For gh api commands
     steps:
       - name: Checkout repository
         uses: actions/checkout@v5
@@ -137,7 +138,7 @@ jobs:
           claude_code_oauth_token: ${{ secrets.CLAUDE_CODE_OAUTH_TOKEN }}
           github_token: ${{ secrets.GITHUB_TOKEN }}
           show_full_output: true
-          allowed_tools: "Bash(gh:*),Bash(echo:*),Bash(cat:*)"
+          allowed_tools: "Bash(gh:*),Bash(echo:*),Bash(cat:*),Bash(cargo +nightly fuzz run:*),Bash(RUST_BACKTRACE=* cargo +nightly fuzz run:*),Bash(find:*),Bash(ls:*),Bash(grep:*),Bash(head:*),Bash(tail:*)"
           prompt: |
             # Fuzzer Crash Analysis and Reporting