kevinveenbirkenbach/homepage.veen.world
1
0
Fork 0
mirror of https://github.com/kevinveenbirkenbach/homepage.veen.world.git synced 2026-04-07 05:12:19 +00:00
Code Issues Packages Projects Releases Wiki Activity

chore: remove comments from settings.json

Browse Source 
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Kevin Veen-Birkenbach
2026-03-28 23:37:10 +01:00
parent 2d8185b747
commit 2c61da9fc3
1 changed files with 0 additions and 50 deletions
Download Patch File Download Diff File Expand all files Collapse all files

50
.claude/settings.json
View File

@@ -1,22 +1,9 @@
{ {
// Project-level Claude Code permissions for portfolio.
// This file is committed to git and applies to all contributors.
// For personal overrides use .claude/settings.local.json (gitignored).
//
// Rule evaluation order: deny > ask > allow (first match wins).
"permissions": { "permissions": {
"allow": [ "allow": [
// ─── FILESYSTEM ──────────────────────────────────────────────────────
"Read", "Read",
"Edit", "Edit",
"Write", "Write",
// ─── GIT (local only) ────────────────────────────────────────────────
"Bash(git status*)", "Bash(git status*)",
"Bash(git log*)", "Bash(git log*)",
"Bash(git diff*)", "Bash(git diff*)",
@@ -27,27 +14,15 @@
"Bash(git fetch*)", "Bash(git fetch*)",
"Bash(git stash*)", "Bash(git stash*)",
"Bash(git -C:*)", "Bash(git -C:*)",
// ─── MAKE ────────────────────────────────────────────────────────────
"Bash(make*)", "Bash(make*)",
// ─── PYTHON ──────────────────────────────────────────────────────────
"Bash(python3*)", "Bash(python3*)",
"Bash(python*)", "Bash(python*)",
"Bash(pip show*)", "Bash(pip show*)",
"Bash(pip list*)", "Bash(pip list*)",
"Bash(pip install*)", "Bash(pip install*)",
// ─── NODE / NPM ──────────────────────────────────────────────────────
"Bash(npm install*)", "Bash(npm install*)",
"Bash(npm run*)", "Bash(npm run*)",
"Bash(npx*)", "Bash(npx*)",
// ─── DOCKER ──────────────────────────────────────────────────────────
"Bash(docker pull*)", "Bash(docker pull*)",
"Bash(docker build*)", "Bash(docker build*)",
"Bash(docker images*)", "Bash(docker images*)",
@@ -62,9 +37,6 @@
"Bash(docker compose*)", "Bash(docker compose*)",
"Bash(docker-compose*)", "Bash(docker-compose*)",
"Bash(docker container prune*)", "Bash(docker container prune*)",
// ─── STANDARD UNIX TOOLS ─────────────────────────────────────────────
"Bash(grep*)", "Bash(grep*)",
"Bash(find*)", "Bash(find*)",
"Bash(ls*)", "Bash(ls*)",
@@ -78,9 +50,6 @@
"Bash(cp*)", "Bash(cp*)",
"Bash(mv*)", "Bash(mv*)",
"Bash(jq*)", "Bash(jq*)",
// ─── WEB FETCH ───────────────────────────────────────────────────────
"WebSearch", "WebSearch",
"WebFetch(domain:github.com)", "WebFetch(domain:github.com)",
"WebFetch(domain:raw.githubusercontent.com)", "WebFetch(domain:raw.githubusercontent.com)",
@@ -89,43 +58,25 @@
"WebFetch(domain:pypi.org)", "WebFetch(domain:pypi.org)",
"WebFetch(domain:docs.cypress.io)", "WebFetch(domain:docs.cypress.io)",
"WebFetch(domain:flask.palletsprojects.com)" "WebFetch(domain:flask.palletsprojects.com)"
], ],
// ─── ALWAYS ASK ───────────────────────────────────────────────────────────
// docker run: root-equivalent without rootless Docker — ask to prevent
// unintended privileged containers. Note: "make exec" already allows
// shell access inside running containers via the Makefile.
// curl: unrestricted network access, can exfiltrate data or pipe remote
// scripts to shell — WebFetch domain whitelist does NOT apply here.
"ask": [ "ask": [
"Bash(git push*)", "Bash(git push*)",
"Bash(docker run*)", "Bash(docker run*)",
"Bash(curl*)" "Bash(curl*)"
], ],
// ─── ALWAYS DENY ──────────────────────────────────────────────────────────
"deny": [ "deny": [
"Bash(git push --force*)", "Bash(git push --force*)",
"Bash(git reset --hard*)", "Bash(git reset --hard*)",
"Bash(rm -rf*)", "Bash(rm -rf*)",
"Bash(sudo*)" "Bash(sudo*)"
] ]
}, },
// ─── SANDBOX ────────────────────────────────────────────────────────────────
"sandbox": { "sandbox": {
"filesystem": { "filesystem": {
// Allow writes within the project and common runtime directories
"allowWrite": [ "allowWrite": [
".", ".",
"/tmp" "/tmp"
], ],
// Protect sensitive paths outside the project
"denyRead": [ "denyRead": [
"~/.ssh", "~/.ssh",
"~/.gnupg", "~/.gnupg",
@@ -135,5 +86,4 @@
] ]
} }
} }
} }