Marcos Benítez
63c4fbac99
- settings.json: deny patterns críticos (rm -rf root, force push, etc.) - settings.local.json en gitignore — cada dev configura sus allows Refs: methodology/PATTERNS.md B.4 (reglas no negociables en repo)
14 lines
273 B
JSON
14 lines
273 B
JSON
{
|
|
"permissions": {
|
|
"deny": [
|
|
"Bash(rm -rf /)",
|
|
"Bash(rm -rf /*)",
|
|
"Bash(rm -rf ~)",
|
|
"Bash(rm -rf ~/*)",
|
|
"Bash(git push --force *)",
|
|
"Bash(git reset --hard *)",
|
|
"Bash(git clean -fdx *)",
|
|
"Bash(npm publish *)"
|
|
]
|
|
}
|
|
} |