orange-lab/opencode.json at main · OrangeLab-space/orange-lab · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
{
    "$schema": "https://opencode.ai/config.json",
    "permission": {
        "bash": {
            "*": "ask",
            "*Pulumi*.yaml*": "ask",
            "cat *": "allow",
            "curl *": "allow",
            "echo *": "allow",
            "find *": "allow",
            "gh release *": "ask",
            "git diff *": "allow",
            "git fetch *": "allow",
            "git grep *": "allow",
            "git log *": "allow",
            "git show *": "allow",
            "git status *": "allow",
            "gh issue list *": "allow",
            "gh pr list *": "allow",
            "gh pr diff *": "allow",
            "gh pr view *": "allow",
            "gh repo list *": "allow",
            "gh repo view *": "allow",
            "gh release list *": "allow",
            "gh release view *": "allow",
            "gh search issues *": "allow",
            "grep *": "allow",
            "head *": "allow",
            "jq *": "allow",
            "kubectl describe *": "allow",
            "kubectl get *": "allow",
            "kubectl -n * get *": "allow",
            "kubectl -n * describe *": "allow",
            "kubectl -n * logs *": "allow",
            "kubectl rollout status *": "allow",
            "kubectl apply *": "ask",
            "kubectl delete *": "ask",
            "kubectl exec *": "ask",
            "kubectl rollout restart *": "ask",
            "kubectl get secret *": "ask",
            "kubectl get secrets *": "ask",
            "kubectl logs *": "allow",
            "ls *": "allow",
            "npm run build *": "allow",
            "npm run lint": "allow",
            "npm run test": "allow",
            "npm test*": "allow",
            "pulumi * --show-secrets *": "ask",
            "pulumi config get *": "allow",
            "pulumi config set *": "ask",
            "pulumi preview *": "allow",
            "pulumi up *": "ask",
            "pulumi destroy *": "ask",
            "pulumi stack output *": "allow",
            "pwd": "allow",
            "printf *": "allow",
            "rg *": "allow",
            "sed *": "allow",
            "sort *": "allow",
            "sleep *": "allow",
            "tail *": "allow",
            "timeout *": "allow",
            "tr *": "allow",
            "uniq *": "allow",
            "wc *": "allow"
        },
        "read": {
            "**/Pulumi.*.yaml": "deny"
        },
        "edit": {
            "*": "ask",
            "**/Pulumi.*.yaml": "deny",
            "node_modules/*": "deny"
        }
    }
}