fix: add schema, Bash deny rules for secrets, fix git push -f glob

This commit is contained in:
Bryan Ramos 2026-04-01 16:56:54 -04:00
parent 5095de1fea
commit 2fdd30bf04

View file

@ -1,4 +1,5 @@
{ {
"$schema": "https://json.schemastore.org/claude-code-settings.json",
"permissions": { "permissions": {
"allow": [ "allow": [
"Bash", "Bash",
@ -14,7 +15,7 @@
"Bash(rm *)", "Bash(rm *)",
"Bash(rmdir *)", "Bash(rmdir *)",
"Bash(git push --force*)", "Bash(git push --force*)",
"Bash(git push -f *)", "Bash(git push -f*)",
"Bash(git reset --hard*)", "Bash(git reset --hard*)",
"Bash(git clean *)", "Bash(git clean *)",
"Bash(chmod *)", "Bash(chmod *)",
@ -31,7 +32,14 @@
"Read(~/.aws/**)", "Read(~/.aws/**)",
"Read(~/.gnupg/**)", "Read(~/.gnupg/**)",
"Read(./.env)", "Read(./.env)",
"Read(./.env.*)" "Read(./.env.*)",
"Bash(cat ~/.ssh/*)",
"Bash(cat ~/.aws/*)",
"Bash(cat ~/.gnupg/*)",
"Bash(cat .env*)",
"Bash(less ~/.ssh/*)",
"Bash(less ~/.aws/*)",
"Bash(less ~/.gnupg/*)"
] ]
}, },
"model": "sonnet", "model": "sonnet",