settings.json.tpl

来自 cli/templates/level-0/

{
  "permissions": {
    "allow": [
      "Bash(npm run lint)",
      "Bash(npm run test:*)",
      "Bash(npm run build)",
      "Bash(npx prettier:*)",
      "Bash(npx tsc:*)",
      "Bash(git log:*)",
      "Bash(git diff:*)",
      "Bash(git status)",
      "Bash(git branch:*)",
      "Bash(git checkout:*)",
      "Bash(git stash:*)"
    ],
    "deny": [
      "Bash(sudo:*)",
      "Bash(curl *|*sh)",
      "Bash(wget *|*sh)",
      "Bash(rm -rf /)",
      "Bash(git push *--force*)",
      "Bash(git reset --hard)",
      "Bash(chmod 777:*)",
      "Read(.env)",
      "Read(.env.*)",
      "Read(**/*.key)",
      "Read(**/*.pem)"
    ]
  },
  "env": {
    "BASH_DEFAULT_TIMEOUT_MS": "30000"
  }
}