Reduce sensitive paths guard to paths in actual use in this application
This commit is contained in:
@@ -1,17 +1,7 @@
|
|||||||
{
|
{
|
||||||
"_comment": "Blocked paths for pi. Glob-like patterns, matched case-insensitively against absolute paths. blocked_commands are exact command names (not regexes), matched case-insensitively against structurally parsed bash AST command names.",
|
"_comment": "Blocked paths for pi. Glob-like patterns, matched case-insensitively against absolute paths. blocked_commands are exact command names (not regexes), matched case-insensitively against structurally parsed bash AST command names.",
|
||||||
"blocked_paths": [
|
"blocked_paths": [
|
||||||
"mise.local.toml",
|
"mise.local.toml"
|
||||||
"*.pem",
|
|
||||||
"*.key",
|
|
||||||
"*.key.pub",
|
|
||||||
"*secret*",
|
|
||||||
"*credential*",
|
|
||||||
"*credentials*",
|
|
||||||
".ssh/",
|
|
||||||
".aws/",
|
|
||||||
".gnupg/",
|
|
||||||
"~/.pi/agent/sessions/"
|
|
||||||
],
|
],
|
||||||
"blocked_commands": [
|
"blocked_commands": [
|
||||||
"printenv",
|
"printenv",
|
||||||
|
|||||||
Reference in New Issue
Block a user