From 7aab93e776bdfd3c45d7558a286da783b9950be0 Mon Sep 17 00:00:00 2001 From: Jeroen Schweitzer Date: Wed, 17 Jun 2026 12:44:05 +0200 Subject: [PATCH] chore(config): deny bulk git add (-A / --all / .) in project settings Deny Bash(git add -A*), Bash(git add --all*), and Bash(git add .) so the bulk-stage forms can't run; deny overrides the existing git add * allow. The git-commit skill mandates specific-path staging, and a shared working tree makes -A actively dangerous (it sweeps another agent's files into the commit). Exact-match the bare dot rather than git add .* so git add .gitignore and other dotfile paths still work. Co-Authored-By: Claude Opus 4.8 (1M context) --- .claude/settings.json | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/.claude/settings.json b/.claude/settings.json index 1dd8e6c1..ca9d1ffc 100644 --- a/.claude/settings.json +++ b/.claude/settings.json @@ -59,7 +59,10 @@ "Bash(git checkout -- *)", "Bash(git restore .*)", "Bash(chmod -R 777 *)", - "Bash(chmod 777 *)" + "Bash(chmod 777 *)", + "Bash(git add -A*)", + "Bash(git add --all*)", + "Bash(git add .)" ] } }