safe-chains 0.112.3

Auto-allow safe, read-only bash commands in agentic coding tools
Documentation
[[command]]
name = "cat"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#cat-invocation"
level = "Inert"
bare = true
standalone = [
    "-A", "-E", "-T", "-V", "-b", "-e", "-h", "-l", "-n", "-s", "-t", "-u", "-v",
    "--help", "--number", "--number-nonblank", "--show-all", "--show-ends",
    "--show-nonprinting", "--show-tabs", "--squeeze-blank", "--version",
]

[[command]]
name = "col"
url = "https://man7.org/linux/man-pages/man1/col.1.html"
level = "Inert"
bare = true
standalone = ["-V", "-b", "-f", "-h", "-p", "-x", "--help", "--version"]
valued = ["-l"]

[[command]]
name = "column"
url = "https://man7.org/linux/man-pages/man1/column.1.html"
level = "Inert"
bare = true
standalone = [
    "-J", "-L", "-R", "-V", "-e", "-h", "-n", "-t", "-x",
    "--fillrows", "--help", "--json", "--keep-empty-lines", "--table",
    "--table-noextreme", "--table-noheadings", "--table-right-all", "--version",
]
valued = [
    "-E", "-H", "-O", "-W", "-c", "-d", "-o", "-r", "-s",
    "--output-separator", "--separator", "--table-columns", "--table-empty-lines",
    "--table-hide", "--table-name", "--table-order", "--table-right",
    "--table-truncate", "--table-wrap",
]

[[command]]
name = "comm"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#comm-invocation"
level = "Inert"
bare = false
standalone = [
    "-1", "-2", "-3", "-V", "-h", "-i", "-z",
    "--check-order", "--help", "--nocheck-order", "--total",
    "--version", "--zero-terminated",
]
valued = ["--output-delimiter"]

[[command]]
name = "cut"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#cut-invocation"
level = "Inert"
bare = false
standalone = [
    "-V", "-h", "-n", "-s", "-w", "-z",
    "--complement", "--help", "--only-delimited", "--version", "--zero-terminated",
]
valued = [
    "-b", "-c", "-d", "-f",
    "--bytes", "--characters", "--delimiter", "--fields", "--output-delimiter",
]

[[command]]
name = "expand"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#expand-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-h", "-i", "--help", "--initial", "--version"]
valued = ["-t", "--tabs"]

[[command]]
name = "fmt"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#fmt-invocation"
level = "Inert"
bare = true
standalone = [
    "-V", "-c", "-h", "-m", "-n", "-s", "-u",
    "--crown-margin", "--help", "--split-only", "--tagged-paragraph",
    "--uniform-spacing", "--version",
]
valued = ["-d", "-g", "-l", "-p", "-t", "-w", "--goal", "--prefix", "--width"]

[[command]]
name = "fold"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#fold-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-b", "-h", "-s", "--bytes", "--help", "--spaces", "--version"]
valued = ["-w", "--width"]

[[command]]
name = "head"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#head-invocation"
level = "Inert"
bare = true
standalone = [
    "-0", "-1", "-2", "-3", "-4", "-5", "-6", "-7", "-8", "-9",
    "-V", "-h", "-q", "-v", "-z",
    "--help", "--quiet", "--silent", "--verbose", "--version", "--zero-terminated",
]
valued = ["-c", "-n", "--bytes", "--lines"]

[[command]]
name = "iconv"
url = "https://man7.org/linux/man-pages/man1/iconv.1.html"
level = "Inert"
bare = false
standalone = ["-V", "-c", "-h", "-l", "-s", "--help", "--list", "--silent", "--version"]
valued = ["-f", "-t", "--from-code", "--to-code"]

[[command]]
name = "less"
url = "https://man7.org/linux/man-pages/man1/less.1.html"
level = "Inert"
bare = true
standalone = [
    "-E", "-F", "-G", "-I", "-J", "-K", "-L", "-M", "-N", "-Q", "-R", "-S",
    "-V", "-W", "-X", "-a", "-c", "-e", "-f", "-g", "-i", "-m", "-n", "-q",
    "-r", "-s", "-w",
    "--QUIT-AT-EOF", "--RAW-CONTROL-CHARS", "--chop-long-lines", "--help",
    "--ignore-case", "--no-init", "--quiet", "--quit-at-eof",
    "--quit-if-one-screen", "--raw-control-chars", "--silent",
    "--squeeze-blank-lines", "--version",
]
valued = [
    "-P", "-b", "-h", "-j", "-p", "-t", "-x", "-y", "-z",
    "--LINE-NUMBERS", "--LONG-PROMPT", "--pattern", "--prompt",
    "--shift", "--tabs", "--tag", "--window",
]

[[command]]
name = "more"
url = "https://man7.org/linux/man-pages/man1/more.1.html"
level = "Inert"
bare = true
standalone = ["-V", "-c", "-d", "-f", "-h", "-l", "-p", "-s", "-u", "--help", "--version"]
valued = ["-n", "--lines"]

[[command]]
name = "nl"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#nl-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-p", "--help", "--no-renumber", "--version"]
valued = [
    "-b", "-d", "-f", "-h", "-i", "-l", "-n", "-s", "-v", "-w",
    "--body-numbering", "--footer-numbering", "--header-numbering",
    "--join-blank-lines", "--line-increment", "--number-format",
    "--number-separator", "--number-width", "--section-delimiter",
    "--starting-line-number",
]

[[command]]
name = "nroff"
url = "https://man7.org/linux/man-pages/man1/nroff.1.html"
level = "Inert"
bare = false
standalone = ["-S", "-V", "-c", "-h", "-i", "-k", "-p", "-q", "-t", "--help", "--version"]
valued = ["-M", "-P", "-T", "-d", "-m", "-n", "-o", "-r", "-w"]

[[command]]
name = "paste"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#paste-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-h", "-s", "-z", "--help", "--serial", "--version", "--zero-terminated"]
valued = ["-d", "--delimiters"]

[[command]]
name = "rev"
url = "https://man7.org/linux/man-pages/man1/rev.1.html"
level = "Inert"
bare = true
standalone = ["-V", "-h", "--help", "--version"]

[[command]]
name = "tac"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#tac-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-b", "-h", "-r", "--before", "--help", "--regex", "--version"]
valued = ["-s", "--separator"]

[[command]]
name = "tail"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#tail-invocation"
level = "Inert"
bare = true
standalone = [
    "-0", "-1", "-2", "-3", "-4", "-5", "-6", "-7", "-8", "-9",
    "-F", "-V", "-f", "-h", "-q", "-r", "-v", "-z",
    "--follow", "--help", "--quiet", "--retry", "--silent",
    "--verbose", "--version", "--zero-terminated",
]
valued = ["-b", "-c", "-n", "--bytes", "--lines", "--max-unchanged-stats", "--pid", "--sleep-interval"]

[[command]]
name = "tr"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#tr-invocation"
level = "Inert"
bare = false
standalone = [
    "-C", "-V", "-c", "-d", "-h", "-s",
    "--complement", "--delete", "--help", "--squeeze-repeats",
    "--truncate-set1", "--version",
]

[[command]]
name = "unexpand"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#unexpand-invocation"
level = "Inert"
bare = true
standalone = ["-V", "-a", "-h", "--all", "--first-only", "--help", "--version"]
valued = ["-t", "--tabs"]

[[command]]
name = "uniq"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#uniq-invocation"
level = "Inert"
bare = true
max_positional = 1
standalone = [
    "-D", "-V", "-c", "-d", "-h", "-i", "-u", "-z",
    "--count", "--help", "--ignore-case", "--repeated",
    "--unique", "--version", "--zero-terminated",
]
valued = [
    "-f", "-s", "-w",
    "--all-repeated", "--check-chars", "--group",
    "--skip-chars", "--skip-fields",
]

[[command]]
name = "wc"
url = "https://www.gnu.org/software/coreutils/manual/coreutils.html#wc-invocation"
level = "Inert"
bare = true
standalone = [
    "-L", "-V", "-c", "-h", "-l", "-m", "-w",
    "--bytes", "--chars", "--help", "--lines",
    "--max-line-length", "--version", "--words", "--zero-terminated",
]
valued = ["--files0-from"]

[[command]]
name = "zcat"
url = "https://man7.org/linux/man-pages/man1/zcat.1.html"
level = "Inert"
bare = true
aliases = ["gzcat"]
standalone = ["-V", "-f", "-h", "-q", "-v", "--force", "--help", "--quiet", "--verbose", "--version"]