chore(claude): sandbox bash, deny git push/commit

2026-07-07 09:21:59 +02:00
parent d89a433695
commit 509ed85fb2
1 changed files with 20 additions and 0 deletions
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -0,0 +1,20 @@
+{
+  "permissions": {
+    "defaultMode": "dontAsk",
+    "deny": [
+      "Bash(git push)",
+      "Bash(git push:*)",
+      "Bash(git commit)",
+      "Bash(git commit:*)",
+      "Bash(git -C * push)",
+      "Bash(git -C * push:*)",
+      "Bash(git -C * commit)",
+      "Bash(git -C * commit:*)"
+    ]
+  },
+  "sandbox": {
+    "enabled": true,
+    "autoAllowBashIfSandboxed": true,
+    "allowUnsandboxedCommands": false
+  }
+}