[permissions]
allow = ["Bash(pnpm approve-builds:*)"]