safe-chains 0.221.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43

[[command]]
name = "code"
aliases = ["code-insiders", "codium"]
description = "VS Code CLI — opens files / diffs in the editor and manages extensions. Most invocations launch the GUI editor. Read-side: --version, --help, --list-extensions, --status, --locate-shell-integration-path. Write-side: --install-extension, --uninstall-extension, --update-extensions, --enable-proposed-api, --disable-extension (singular, valued), --add-mcp (writes an MCP server definition to the user profile). Editor-launching modes: bare, --diff a b, --merge a b base out, --goto, --add, --remove. The `--pre-release` modifier toggles whether extension management commands target pre-release versions."
url = "https://code.visualstudio.com/docs/configure/command-line"
researched_version = "VS Code 1.123"
level = "SafeRead"
bare = true
standalone = [
    "--add", "--category", "--diff",
    "--disable-chromium-sandbox", "--disable-extensions",
    "--disable-features", "--disable-gpu",
    "--disable-lcd-text", "--disable-telemetry",
    "--extensions-dir", "--goto", "--help",
    "--inspect-brk-extensions", "--inspect-extensions",
    "--list-extensions", "--locale",
    "--locate-shell-integration-path", "--log",
    "--max-memory", "--merge",
    "--new-window", "--no-sandbox",
    "--open-url", "--port", "--pre-release",
    "--prof-startup", "--profile",
    "--ready-to-launch", "--remove", "--reuse-window",
    "--show-versions", "--status",
    "--sync", "--telemetry", "--trace", "--transient",
    "--user-data-dir", "--verbose", "--version",
    "--wait", "-a", "-d", "-g", "-h", "-m", "-n",
    "-r", "-s", "-v", "-w",
]
valued = [
    "--add", "--add-mcp", "--category", "--diff",
    "--disable-extension", "--enable-proposed-api", "--extensions-dir",
    "--goto", "--inspect-brk-extensions",
    "--inspect-extensions", "--install-extension",
    "--locale", "--log", "--max-memory",
    "--merge", "--open-url", "--port",
    "--profile", "--remove", "--show-versions",
    "--sync", "--uninstall-extension",
    "--user-data-dir",
]
write_flags = [
    "--add-mcp", "--enable-proposed-api",
    "--install-extension", "--uninstall-extension", "--update-extensions",
]