safe-chains 0.136.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25

[[command]]
name = "pkgutil"
description = "macOS package receipt inspection tool. The query flags (--pkgs, --files, --pkg-info, --check-signature, --export-plist, --payload-files, etc.) are read-only — they inspect the local package receipt database or examine .pkg files without installing anything. The write operations (--forget, --expand, --flatten) modify the receipt database or extract/repack package archives. Entirely local; no network access. Part of macOS; versioning follows macOS releases."
url = "https://ss64.com/mac/pkgutil.html"
level = "Inert"
bare = false
require_any = [
    "--check-signature", "--export-plist",
    "--file-info", "--file-info-plist",
    "--files", "--group-pkgs", "--groups", "--groups-plist",
    "--packages", "--payload-files",
    "--pkg-groups", "--pkg-info", "--pkg-info-plist",
    "--pkgs", "--pkgs-plist",
]
standalone = [
    "--check-signature", "--export-plist",
    "--file-info", "--file-info-plist",
    "--files", "--group-pkgs", "--groups", "--groups-plist",
    "--packages", "--payload-files",
    "--pkg-groups", "--pkg-info", "--pkg-info-plist",
    "--pkgs", "--pkgs-plist",
    "--regexp",
    "--help", "-h",
]
valued = ["--volume"]