safe-chains 0.222.0

Auto-allow safe bash commands in agentic coding tools
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44

[[command]]
name = "age"
description = "Modern, simple file encryption tool. Bare invocation reads input (file or stdin) and writes encrypted output (or vice versa with -d/--decrypt). -o/--output redirects from stdout to a file. -r/--recipient and -R/--recipients-file specify keys; -i/--identity sets the decryption key. -a/--armor produces ASCII output. -p/--passphrase prompts. No network. Active project."
url = "https://age-encryption.org/"
researched_version = "age 1.x"
level = "SafeWrite"
bare = false
examples_safe = [
    "age -e -r RECIP -o out.age plain.txt",
    "age --encrypt -o out.age plain.txt",
    "age -ea -r RECIP -o out.age plain.txt",
]
examples_denied = [
    "age -d secrets.age",
    "age --decrypt -i key.txt secrets.age",
    "age -da secrets.age",
    "age -vd secrets.age",
]
standalone = [
    "--armor", "--decrypt", "--encrypt",
    "--help", "--passphrase", "--version",
    "-a", "-d", "-e", "-h", "-p",
]
valued = [
    "--identity", "--output",
    "--recipient", "--recipients-file",
    "-R", "-i", "-o", "-r",
]

# Decryption reveals the plaintext of an encrypted file to the caller — a secret disclosure to the
# model. The bare/encrypt form produces ciphertext (an ordinary local write); only `-d`/`--decrypt`
# flips age into the disclosure mode, so it classifies as `decrypt-read` (yolo) while encrypt stays
# SafeWrite. Both spellings are listed so either triggers it.
[[command.flag]]
name = "-d"
classifies = "decrypt-read"
fact = "`age -d`/`--decrypt` decrypts the input and writes the PLAINTEXT to stdout (or to `-o FILE`) — the decrypted content enters the caller's context."
source = "https://age-encryption.org/ (age(1) — decryption mode)"

[[command.flag]]
name = "--decrypt"
classifies = "decrypt-read"
fact = "`age --decrypt` decrypts the input and writes the PLAINTEXT to stdout (or to `-o FILE`) — the decrypted content enters the caller's context."
source = "https://age-encryption.org/ (age(1) — decryption mode)"