-
Notifications
You must be signed in to change notification settings - Fork 254
Open
Description
The syntax shown in the section about avoiding checkins of secrets does not seem to be correct:
https://github.com/Cranot/claude-code-guide?tab=readme-ov-file#best-security-practices-community
I do not see this kind of syntax in any documentation, and claude itself tells me that it's not correct.
You have:
{
"permissions": {
"deny": {
"Write": ["*.env", "*.key", "*.pem", "*secret*"],
"Edit": ["*.env", "*.key", "*.pem", "*secret*"]
}
}
}
But I believe it should instead be:
{
"permissions": {
"deny": [
"Write(*.env)",
"Write(*.key)",
"Write(*.pem)",
"Write(*secret*)",
"Edit(*.env)",
"Edit(*.key)",
"Edit(*.pem)",
"Edit(*secret*)"
]
}
}
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels