mirror of
https://github.com/kevinveenbirkenbach/homepage.veen.world.git
synced 2026-05-14 09:15:32 +00:00
Kevin Veen-Birkenbach
c9fe7d8583
Add permissions for read-only test/inspection commands (make test-e2e, docker exec/restart, /tmp reads) and gitignore everything under .claude except the shared settings/gitignore. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
99 lines
2.2 KiB
JSON
99 lines
2.2 KiB
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Read",
|
|
"Edit",
|
|
"Write",
|
|
"Bash(git status*)",
|
|
"Bash(git log*)",
|
|
"Bash(git diff*)",
|
|
"Bash(git add*)",
|
|
"Bash(git commit*)",
|
|
"Bash(git checkout*)",
|
|
"Bash(git branch*)",
|
|
"Bash(git fetch*)",
|
|
"Bash(git stash*)",
|
|
"Bash(git -C:*)",
|
|
"Bash(make*)",
|
|
"Bash(python3*)",
|
|
"Bash(python*)",
|
|
"Bash(pip show*)",
|
|
"Bash(pip list*)",
|
|
"Bash(pip install*)",
|
|
"Bash(npm install*)",
|
|
"Bash(npm run*)",
|
|
"Bash(npx*)",
|
|
"Bash(docker pull*)",
|
|
"Bash(docker build*)",
|
|
"Bash(docker images*)",
|
|
"Bash(docker ps*)",
|
|
"Bash(docker inspect*)",
|
|
"Bash(docker logs*)",
|
|
"Bash(docker create*)",
|
|
"Bash(docker export*)",
|
|
"Bash(docker rm*)",
|
|
"Bash(docker rmi*)",
|
|
"Bash(docker stop*)",
|
|
"Bash(docker compose*)",
|
|
"Bash(docker-compose*)",
|
|
"Bash(docker container prune*)",
|
|
"Bash(grep*)",
|
|
"Bash(find*)",
|
|
"Bash(ls*)",
|
|
"Bash(cat*)",
|
|
"Bash(head*)",
|
|
"Bash(tail*)",
|
|
"Bash(wc*)",
|
|
"Bash(sort*)",
|
|
"Bash(tar*)",
|
|
"Bash(mkdir*)",
|
|
"Bash(cp*)",
|
|
"Bash(mv*)",
|
|
"Bash(jq*)",
|
|
"WebSearch",
|
|
"WebFetch(domain:github.com)",
|
|
"WebFetch(domain:raw.githubusercontent.com)",
|
|
"WebFetch(domain:api.github.com)",
|
|
"WebFetch(domain:docs.docker.com)",
|
|
"WebFetch(domain:pypi.org)",
|
|
"WebFetch(domain:docs.cypress.io)",
|
|
"WebFetch(domain:flask.palletsprojects.com)",
|
|
"Bash(netstat -lnt)",
|
|
"Bash(make test-e2e *)",
|
|
"Bash(echo \"EXIT=$?\")",
|
|
"Read(//tmp/**)",
|
|
"Bash(docker exec *)",
|
|
"Bash(docker restart *)"
|
|
],
|
|
"deny": [
|
|
"Bash(git push --force*)",
|
|
"Bash(git reset --hard*)",
|
|
"Bash(rm -rf*)",
|
|
"Bash(sudo*)"
|
|
],
|
|
"ask": [
|
|
"Bash(git push*)",
|
|
"Bash(docker run*)",
|
|
"Bash(curl*)"
|
|
],
|
|
"additionalDirectories": [
|
|
"/tmp"
|
|
]
|
|
},
|
|
"sandbox": {
|
|
"filesystem": {
|
|
"allowWrite": [
|
|
".",
|
|
"/tmp"
|
|
],
|
|
"denyRead": [
|
|
"~/.ssh",
|
|
"~/.gnupg",
|
|
"~/.kube",
|
|
"~/.aws",
|
|
"~/.config/gcloud"
|
|
]
|
|
}
|
|
}
|
|
}
|