Add ability to block commands

2025-12-25 19:03:01 -08:00
parent 6159bdd38a
commit 47de3e431c
9 changed files with 909 additions and 0 deletions
--- a/docs/templates/git-readonly.json
+++ b/docs/templates/git-readonly.json
@@ -0,0 +1,19 @@
+{
+  "network": {
+    "allowedDomains": []
+  },
+  "filesystem": {
+    "allowWrite": ["."],
+    "denyWrite": [".git"]
+  },
+  "command": {
+    "deny": [
+      "git push",
+      "git reset",
+      "git clean",
+      "git checkout --",
+      "git rebase",
+      "git merge"
+    ]
+  }
+}