Documentation missing list of available tools for --allowed-tools configuration

[akostibas]

Problem

The configuration documentation mentions the --allowed-tools parameter but doesn't list what tools are actually available to specify. This makes it difficult for users to configure the action properly.

The current docs show example usage like:

claude_args: |
  --allowedTools "Bash(git:*),Edit,Read"

But users have no reference for what other tools exist beyond the ones shown in examples.

Suggested Solution

Add a section to the configuration documentation that lists all available built-in tools:

File Operations:

• Edit - Edit files
• Read - Read files
• Write - Write files
• Glob - File pattern matching
• Grep - Content search

Execution:

• Bash - Execute shell commands (requires pattern specification, e.g., Bash(git:*) or Bash(npm install))

Web:

• WebFetch - Fetch web content
• WebSearch - Search the web

Other:

• NotebookRead / NotebookEdit - Work with Jupyter notebooks
• MultiEdit - Batch file edits

Note: MCP (Model Context Protocol) tools follow the pattern mcp__<server>__<tool_name>

Additional Context

This information is available in the Claude Code CLI reference, but users configuring the GitHub Action shouldn't need to hunt through separate documentation to find what tools they can configure.

Also worth clarifying the distinction between:

• --allowedTools - Tools that execute without prompting for permission
• --tools - Restricts which tools are available at all

[ricaskew]

Looking at this as a candidate for a docs fix and ran into a structural finding worth surfacing before any PR lands.

There's no canonical Claude Code docs page that enumerates the full list of valid --allowedTools tool names. The two pages most likely to host that enumeration both deflect to each other:

• code.claude.com/docs/en/settings documents permission rule syntax with examples but redirects readers to /en/permissions#permission-rule-syntax for the complete rule syntax reference.
• code.claude.com/docs/en/permissions documents Bash wildcards, Read/Edit gitignore patterns, WebFetch domain syntax, MCP mcp__server__tool form, and Agent(Name) form. It mentions Bash, Read, Edit, WebFetch, MCP, Agent in passing but does not enumerate the full toolset (Write, Glob, Grep, NotebookEdit, WebSearch, MultiEdit, etc.).

Neither page is the canonical list this issue asks claude-code-action to point at.

Could a maintainer confirm whether (a) a canonical tools-enumeration page exists somewhere I missed, (b) one is planned upstream and an inline fix here would be temporary, or (c) inline content is the expected long-term shape for this repo? Happy to follow up with the appropriate PR once the path is clear.

(Not a maintainer — just a contributor doing recon before opening a PR.)