ded8d82d0c35dabfb536fad35dedb6ecc136a644

Message

always allow github comments

Diff

This diff is truncated to protect this page.

 1diff --git a/src/rules.ts b/src/rules.ts
 2index e32cf1a8d8f2658faf52dc798921ae59cd50e068..5b2fe8bbba0df2c3aac86dce77c1a7fba5c4ae54 100644
 3--- a/src/rules.ts
 4+++ b/src/rules.ts
 5@@ -162,7 +162,7 @@ Ask:
 6 - Wide destructive commands (e.g. rm -rf /, /etc, /usr, ~/).
 7 - Reading or exposing obvious secret material (~/.ssh, ~/.aws, ~/.config, .env, credentials, *.pem, *.key), don't assume anything could be secret.
 8 - Editing files outside the home/tmp/project scope
 9-- Mutating remote or OS state
10+- Mutating remote database, kubernetes, cloud provider, etc. state
11 - Pushes directly to main, master, develop and other obvious main branches
12 - Irreversibly destructive git commands (checkout files, reset hard, etc.)
13 
14@@ -172,6 +172,7 @@ Allow:
15 - Processes, containers, services, or other local state via any CLI or daemon (e.g. \`docker ps\`, \`systemctl status\`, \`ps\`)
16 - Git status/diff/add/commit and remote reads (\`git fetch\`, GET requests, \`gh api\`).
17 - Git rebases and pushes of feature branches and PR creation
18+- Github PR reviews, comments, and other non-destructive actions
19 - Creating, editing, moving, or renaming files under the user's home, /tmp, or a relative/project-scoped path — including in-place edits like \`sed -i\` across multiple files.
20 - Builds, tests, and dependency installs