shellfirm 0.3.7

`shellfirm` will intercept any risky patterns (default or defined by you) and prompt you a small challenge for double verification, kinda like a captcha for your terminal.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130

---
# -- gcp:delete_gke_cluster --
- test: "gcloud container clusters delete mycluster"
  description: "deleting a GKE cluster destroys all workloads running on it"
  expect_ids: ["gcp:delete_gke_cluster"]
- test: "gcloud  container  clusters  delete  prod-cluster --zone us-east1-b"
  description: "extra spaces in gcloud container clusters delete still matches"
  expect_ids: ["gcp:delete_gke_cluster"]
- test: "gcloud container clusters describe mycluster"
  description: "describing a GKE cluster should not trigger delete check"
  expect_ids: []

# -- gcp:delete_instance --
- test: "gcloud compute instances delete myvm"
  description: "deleting a Compute Engine instance permanently destroys it"
  expect_ids: ["gcp:delete_instance"]
- test: "gcloud  compute  instances  delete  prod-vm --zone us-central1-a"
  description: "extra spaces in gcloud compute instances delete still matches"
  expect_ids: ["gcp:delete_instance"]
- test: "gcloud compute instances list"
  description: "listing Compute Engine instances should not trigger delete check"
  expect_ids: []

# -- gcp:delete_project --
- test: "gcloud projects delete myproject"
  description: "deleting a GCP project destroys all resources within it"
  expect_ids: ["gcp:delete_project"]
- test: "gcloud  projects  delete  my-other-project"
  description: "extra spaces in gcloud projects delete still matches"
  expect_ids: ["gcp:delete_project"]
- test: "gcloud projects list"
  description: "listing GCP projects should not trigger delete check"
  expect_ids: []

# -- gcp:delete_service_account --
- test: "gcloud iam service-accounts delete sa@proj.iam"
  description: "deleting a service account can break applications using it"
  expect_ids: ["gcp:delete_service_account"]
- test: "gcloud  iam  service-accounts  delete  deploy@proj.iam.gserviceaccount.com"
  description: "extra spaces in gcloud iam service-accounts delete still matches"
  expect_ids: ["gcp:delete_service_account"]
- test: "gcloud iam service-accounts list"
  description: "listing service accounts should not trigger delete check"
  expect_ids: []

# -- gcp:delete_sql_instance --
- test: "gcloud sql instances delete mydb"
  description: "deleting a Cloud SQL instance permanently destroys the database"
  expect_ids: ["gcp:delete_sql_instance"]
- test: "gcloud  sql  instances  delete  prod-db"
  description: "extra spaces in gcloud sql instances delete still matches"
  expect_ids: ["gcp:delete_sql_instance"]
- test: "gcloud sql instances describe mydb"
  description: "describing a Cloud SQL instance should not trigger delete check"
  expect_ids: []

# -- gcp:gcs_recursive_delete --
- test: "gsutil rm -r gs://mybucket/path"
  description: "recursively deleting all objects in a GCS bucket"
  expect_ids: ["gcp:gcs_recursive_delete"]
- test: "gsutil  rm  -r  gs://prod-bucket/data/"
  description: "extra spaces in gsutil rm -r still matches"
  expect_ids: ["gcp:gcs_recursive_delete"]
- test: "gsutil ls gs://mybucket"
  description: "listing GCS bucket contents should not trigger recursive delete check"
  expect_ids: []

# -- gcp:gcs_remove_bucket --
- test: "gsutil rb gs://mybucket"
  description: "removing a GCS bucket and all its contents"
  expect_ids: ["gcp:gcs_remove_bucket"]
- test: "gsutil  rb  gs://old-bucket"
  description: "extra spaces in gsutil rb still matches"
  expect_ids: ["gcp:gcs_remove_bucket"]
- test: "gsutil cat gs://mybucket/file.txt"
  description: "reading a GCS file should not trigger remove bucket check"
  expect_ids: []

# -- gcp:gcs_recursive_delete — flag ordering --
- test: "gsutil -m rm -r gs://mybucket/"
  description: "-m between gsutil and rm now matched"
  expect_ids: ["gcp:gcs_recursive_delete"]

- test: "gsutil rm gs://mybucket/ -r"
  description: "-r after gs:// URL now matched"
  expect_ids: ["gcp:gcs_recursive_delete"]

# -- gcp:delete_function --
- test: "gcloud functions delete my-function"
  description: "delete Cloud Function"
  expect_ids: ["gcp:delete_function"]
- test: "gcloud  functions  delete  my-function --region us-central1"
  description: "match with extra spaces and region"
  expect_ids: ["gcp:delete_function"]
- test: "gcloud functions list"
  description: "negative: listing functions should not match"
  expect_ids: []

# -- gcp:delete_cloud_run --
- test: "gcloud run services delete my-service"
  description: "delete Cloud Run service"
  expect_ids: ["gcp:delete_cloud_run"]
- test: "gcloud  run  services  delete  my-service --region us-central1"
  description: "match with extra spaces"
  expect_ids: ["gcp:delete_cloud_run"]
- test: "gcloud run services list"
  description: "negative: listing services should not match"
  expect_ids: []

# -- gcp:delete_pubsub_topic --
- test: "gcloud pubsub topics delete my-topic"
  description: "delete Pub/Sub topic"
  expect_ids: ["gcp:delete_pubsub_topic"]
- test: "gcloud  pubsub  topics  delete  my-topic"
  description: "match with extra spaces"
  expect_ids: ["gcp:delete_pubsub_topic"]
- test: "gcloud pubsub topics list"
  description: "negative: listing topics should not match"
  expect_ids: []

# -- gcp:delete_secret --
- test: "gcloud secrets delete my-secret"
  description: "delete secret"
  expect_ids: ["gcp:delete_secret"]
- test: "gcloud  secrets  delete  my-secret --project myproject"
  description: "match with extra spaces and project"
  expect_ids: ["gcp:delete_secret"]
- test: "gcloud secrets list"
  description: "negative: listing secrets should not match"
  expect_ids: []