The owner added the rule; docs/PERMISSIONS.md already listed it in the Allow tier. Also record that the force-with-lease deny rule misses the `--force-with-lease=` form. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
26 lines
1.1 KiB
JSON
26 lines
1.1 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(git status:*)", "Bash(git diff:*)", "Bash(git log:*)", "Bash(git show:*)",
|
|
"Bash(git rev-parse:*)", "Bash(git add:*)", "Bash(git commit:*)",
|
|
"Bash(go mod download:*)", "Bash(go build:*)", "Bash(go test:*)", "Bash(go vet:*)",
|
|
"Bash(gofmt -l:*)",
|
|
"Bash(golangci-lint run:*)"
|
|
],
|
|
"ask": [
|
|
"Bash(git push:*)", "Bash(git merge:*)", "Bash(git rebase:*)", "Bash(git switch:*)",
|
|
"Bash(git restore:*)", "Bash(git commit --amend:*)", "Bash(rm:*)",
|
|
"Bash(go get:*)", "Bash(go mod tidy:*)", "Bash(go install:*)",
|
|
"Bash(make:*)", "Bash(docker:*)"
|
|
],
|
|
"deny": [
|
|
"Bash(git push --force:*)", "Bash(git push -f:*)", "Bash(git push --force-with-lease:*)",
|
|
"Bash(git reset --hard:*)", "Bash(git clean:*)", "Bash(git add -f:*)", "Bash(git add --force:*)",
|
|
"Bash(git commit --no-verify:*)", "Bash(git commit -n:*)",
|
|
"Bash(rm -r:*)", "Bash(rm -R:*)", "Bash(rm -rf:*)", "Bash(rm -fr:*)", "Bash(rm -Rf:*)",
|
|
"Bash(rm -fR:*)", "Bash(rm --recursive:*)", "Bash(sudo:*)",
|
|
"Read(./.env)", "Read(./.env.*)", "Read(./secrets/**)"
|
|
]
|
|
}
|
|
}
|