Do not dangerously skip permissions for Claude

Author: ondrejmirtes

.github/workflows/claude-fix-issue.yml

@@ -14,11 +14,6 @@ on:
         required: true
         type: string
 
-permissions:
-  contents: write
-  pull-requests: write
-  issues: write
-
 jobs:
   fix:
     name: "Fix #${{ inputs.issue-number }}"
@@ -170,7 +165,6 @@ jobs:
 
           claude -p \
             --model claude-opus-4-6 \
-            --dangerously-skip-permissions \
             "$(cat /tmp/claude-prompt.txt)"
 
       - name: "Read Claude's summary"

.github/workflows/claude-fix-pr-ci.yml

@@ -6,11 +6,6 @@ on:
       - opened
       - synchronize
 
-permissions:
-  contents: write
-  pull-requests: read
-  actions: read
-
 concurrency:
   group: claude-ci-fix-${{ github.event.pull_request.number }}
   cancel-in-progress: true
@@ -208,7 +203,6 @@ jobs:
 
           claude -p \
             --model claude-opus-4-6 \
-            --dangerously-skip-permissions \
             "$(cat /tmp/claude-ci-prompt.txt)"
 
       - name: "Commit and push fixes"

.github/workflows/claude-react-on-comment.yml

@@ -8,12 +8,6 @@ on:
   pull_request_review_comment:
     types: [created]
 
-permissions:
-  contents: write
-  pull-requests: write
-  issues: write
-  actions: read
-
 concurrency:
   group: claude-pr-reactions-${{ github.event.pull_request.number || github.event.issue.number }}
   cancel-in-progress: true

.github/workflows/issue-bot.yml

@@ -299,7 +299,6 @@ jobs:
 
           claude -p \
             --model claude-opus-4-6 \
-            --dangerously-skip-permissions \
             "Read the file ./tmp/step-summary.md which contains the Issue Bot step summary from CI in Markdown format. Interpret this Markdown to figure out which GitHub issues need regression tests added. For each affected issue (where behavior changed), run /regression-test with the issue number.
 
           Also read the diff of this branch to see what has already been done. The primary fixed issue will already have a test committed. The Issue Bot step summary might mention other fixed issues, so please add regression tests for those.