safe-chains 0.210.2

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128

[[command]]
name = "helmfile"
description = "Wraps helm to manage releases declaratively. `lint`, `diff`, `template`, `list`, `status`, `cache list`, `version` are read-only. `apply`, `sync`, `delete`, `destroy`, `rollback`, `repos`, `deps`, `cache cleanup`, `init`, `write-values`, `chart prepare` modify cluster state or local state. Most operations contact the Kubernetes API and the configured Helm repositories (network)."
url = "https://helmfile.readthedocs.io/"
researched_version = "helmfile 1.x"
bare_flags = ["--help", "--version", "-h", "-v"]

[command.path_gate]
flags = { "--output-dir" = "write" }

[command.wrapper]
standalone = ["--allow-no-matching-release", "--debug", "--disable-force-update", "--enable-live-output", "--no-color", "--quiet", "--strict-parsing"]
valued = ["--args", "--color", "--environment", "--file", "--helm-binary", "--helmfile", "--kube-context", "--log-level", "--namespace", "-b", "-e", "-f", "-l", "-n"]

[[command.sub]]
name = "version"
standalone = ["--full", "--help", "--output", "-h"]
valued = ["--output", "-o"]

[[command.sub]]
name = "lint"
level = "SafeRead"
bare = true
standalone = ["--help", "--include-transitive-needs", "--skip-deps", "--skip-needs", "-h"]
valued = ["--args", "--concurrency", "--selector", "--values", "-l"]

[[command.sub]]
name = "template"
level = "SafeRead"
bare = true
standalone = ["--help", "--include-crds", "--include-needs", "--include-transitive-needs", "--no-hooks", "--skip-cleanup", "--skip-deps", "--skip-needs", "--skip-tests", "--validate", "-h"]
valued = ["--args", "--concurrency", "--debug", "--output-dir", "--output-dir-template", "--selector", "--set", "--show-only", "--values", "-l"]

[[command.sub]]
name = "diff"
level = "SafeRead"
bare = true
standalone = ["--context", "--detailed-exitcode", "--help", "--include-needs", "--include-tests", "--include-transitive-needs", "--no-hooks", "--show-secrets", "--skip-cleanup", "--skip-deps", "--skip-needs", "--suppress-diff", "--suppress-secrets", "--three-way-merge", "-h"]
valued = ["--args", "--concurrency", "--reset-values", "--retain-values-files", "--selector", "--set", "--show-only", "--values", "-l"]

[[command.sub]]
name = "list"
level = "SafeRead"
bare = true
standalone = ["--help", "--keep-temp-dir", "--output", "--skip-charts", "-h"]
valued = ["--output", "--selector", "-l"]

[[command.sub]]
name = "status"
level = "SafeRead"
bare = true
standalone = ["--help", "-h"]
valued = ["--args", "--concurrency", "--selector", "-l"]

[[command.sub]]
name = "cache"
nested_bare = true

[[command.sub.sub]]
name = "list"
standalone = ["--help", "-h"]

[[command.sub.sub]]
name = "info"
standalone = ["--help", "-h"]

[[command.sub.sub]]
name = "cleanup"
candidate = true

[[command.sub]]
name = "fetch"
level = "SafeWrite"
bare = true
standalone = ["--help", "--skip-cleanup", "--skip-deps", "-h"]
valued = ["--concurrency", "--output-dir", "--selector", "-l"]

[[command.sub]]
name = "help"
allow_all = true

[[command.sub]]
name = "apply"
candidate = true

[[command.sub]]
name = "sync"
candidate = true

[[command.sub]]
name = "destroy"
candidate = true

[[command.sub]]
name = "delete"
candidate = true

[[command.sub]]
name = "rollback"
candidate = true

[[command.sub]]
name = "repos"
candidate = true

[[command.sub]]
name = "deps"
candidate = true

[[command.sub]]
name = "init"
candidate = true

[[command.sub]]
name = "build"
candidate = true

[[command.sub]]
name = "test"
candidate = true

[[command.sub]]
name = "write-values"
candidate = true

[[command.sub]]
name = "chart"
candidate = true