vulcan/.safety-net.json at master · mitre/vulcan · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
{
  "$schema": "https://raw.githubusercontent.com/kenryu42/claude-code-safety-net/main/assets/cc-safety-net.schema.json",
  "version": 1,
  "rules": [
    {
      "name": "block-rm-all",
      "command": "rm",
      "block_args": ["-f", "--force", "-r", "--recursive", "-rf", "-fr"],
      "reason": "NEVER delete files without explicit user permission. Ask user to run rm themselves."
    },
    {
      "name": "block-git-rm",
      "command": "git",
      "subcommand": "rm",
      "block_args": ["-f", "--force", "-r", "--recursive", "--cached"],
      "reason": "NEVER remove tracked files. Ask user to run git rm themselves."
    },
    {
      "name": "block-git-clean",
      "command": "git",
      "subcommand": "clean",
      "block_args": ["-f", "--force", "-d", "-x"],
      "reason": "NEVER clean untracked files. Ask user to run git clean themselves."
    },
    {
      "name": "block-git-checkout-dot",
      "command": "git",
      "subcommand": "checkout",
      "block_args": [".", "--", "-f", "--force"],
      "reason": "NEVER discard changes with checkout. Ask user to do it themselves."
    },
    {
      "name": "block-git-reset-hard",
      "command": "git",
      "subcommand": "reset",
      "block_args": ["--hard"],
      "reason": "NEVER reset --hard. Ask user to do it themselves."
    }
  ]
}