[DOCS] Permissions docs missing list of read-only git log/show flags

Documentation Type

Missing documentation (feature not documented)

Documentation Location

https://code.claude.com/docs/en/permissions

Section/Topic

"Permission system" and "Bash" sections

Current Documentation

The permissions page currently defines tool categories and approval behavior:

| Read-only | File reads, Grep | No | N/A | | Bash commands | Shell execution | Yes | Permanently per project directory and command |

It does not document any safe, read-only git command flags.

What's Wrong or Missing?

Changelog v2.1.30 notes additional read-only flags are allowed for git log and git show (including --topo-order, --cherry-pick, --format, and --raw). The permissions documentation does not list which flags are considered read-only/safe for these commands, so users cannot predict approval behavior or configure allow/ask rules consistently.

Suggested Improvement

Add a short subsection under "Bash" or "Permission system" that lists the read-only flags supported for git log and git show in read-only mode, with a brief example command. This would help users understand which read-only git queries are allowed without additional prompts and how to configure permissions accordingly.

Impact

Low - Minor confusion or inconvenience

Additional Context

Affected Pages:
| Page | Context |
|------|---------|
| https://code.claude.com/docs/en/permissions | Permission system and Bash sections |

Total scope: 1 page affected

Changelog reference: https://github.com/anthropics/claude-code/blob/main/CHANGELOG.md