safe-chains 0.192.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68

[[command]]
name = "jekyll"
description = "Static site generator written in Ruby. Reads source content (Markdown, HTML, Liquid templates) and renders a static site into ./_site (or wherever --destination points). The build pipeline loads any Ruby code under _plugins/ and any gems referenced from the project Gemfile, so `build` and `serve` execute arbitrary user-supplied Ruby — same risk profile as `rails runner`. The `doctor` subcommand (alias `hyde`) prints config / deprecation warnings without rendering and does not load _plugins/, so it is safe. `help` is also benign. Active but slow — v4.4.1 dates to January 2025."
url = "https://jekyllrb.com/docs/usage/"
researched_version = "jekyll v4.4.1 (Jan 2025)"
bare_flags = ["--help", "--version", "-h", "-v"]

[[command.sub]]
name = "doctor"
level = "SafeRead"
bare = true
standalone = ["--help", "--trace", "-h", "-t"]
valued = ["--config", "--source"]

[[command.sub]]
name = "hyde"
level = "SafeRead"
bare = true
standalone = ["--help", "--trace", "-h", "-t"]
valued = ["--config", "--source"]

[[command.sub]]
name = "help"
allow_all = true

[[command.sub]]
name = "build"
candidate = true

[[command.sub]]
name = "b"
candidate = true

[[command.sub]]
name = "serve"
candidate = true

[[command.sub]]
name = "server"
candidate = true

[[command.sub]]
name = "s"
candidate = true

[[command.sub]]
name = "clean"
candidate = true

[[command.sub]]
name = "new"
candidate = true

[[command.sub]]
name = "new-theme"
candidate = true

[[command.sub]]
name = "compose"
candidate = true

[[command.sub]]
name = "docs"
candidate = true

[[command.sub]]
name = "import"
candidate = true