"Read Only" Claude Code Permissions .claude/settings.json

settings.json

  "permissions": {
    "allow": [
      "Read",
      "Glob",
      "Grep",
      "Ls",
      "WebFetch",
      "WebSearch",
      "Bash(cat *)",
      "Bash(date *)",
      "Bash(echo *)",
      "Bash(env)",
      "Bash(file *)",
      "Bash(find *)",
      "Bash(grep *)",
      "Bash(head *)",
      "Bash(ls *)",
      "Bash(printenv *)",
      "Bash(pwd *)",
      "Bash(rg *)",
      "Bash(tail *)",
      "Bash(type *)",
      "Bash(wc *)",
      "Bash(which *)",
      "Bash(tree *)",
      "Bash(git add *)",
      "Bash(git bisect *)",
      "Bash(git blame *)",
      "Bash(git branch *)",
      "Bash(git diff *)",
      "Bash(git fetch *)",
      "Bash(git grep *)",
      "Bash(git log *)",
      "Bash(git ls-remote *)",
      "Bash(git remote show *)",
      "Bash(git rev-parse *)",
      "Bash(git show *)",
      "Bash(git status *)",
      "Bash(gh issue list *)",
      "Bash(gh issue view *)",
      "Bash(gh pr checks *)",
      "Bash(gh pr diff *)",
      "Bash(gh pr list *)",
      "Bash(gh pr view *)",
      "Bash(gh repo list *)",
      "Bash(gh repo view *)",
      "Bash(gh status *)",
      "Bash(go test *)",
      "Bash(go fmt *)",
      "Bash(go vet *)",
      "Bash(go build *)",
      "Bash(go install *)",
      "Bash(go mod *)",
      "Bash(cargo build *)",
      "Bash(cargo check *)",
      "Bash(cargo clippy *)",
      "Bash(cargo test *)",
      "Bash(npm info *)",
      "Bash(npm run build *)",
      "Bash(npm run fmt *)",
      "Bash(npm run lint *)",
      "Bash(npm run test *)",
      "Bash(npm test *)",
      "Bash(yarn build:*)",
      "Bash(yarn lint:*)",
      "Bash(yarn test:*)",
      "Bash(yarn typecheck:*)",
      "Bash(yarn typecheck:packages:*)",
      "Bash(terraform fmt *)"
    ],
  },