dotfiles

commit 4bc13583bbe8a89c918426cf48700fa7f4336110
parent 36085bb7e02307d9b0a429a0d816b35f06902f55
Author: Anders Hedman <anders.hedman01@gmail.com>
Date:   Sat, 19 Sep 2026 14:56:40 +0200

chore(opencode): require approval for echo commands

Echo can leak environment variables and secrets, so it now requires
approval instead of being auto-allowed. The redundant deny rule for
echo with variable expansion is no longer needed.

Diffstat:
M
.config/opencode/opencode.jsonc
 | 
3
+--

1 file changed, 1 insertion(+), 2 deletions(-)
diff --git a/.config/opencode/opencode.jsonc b/.config/opencode/opencode.jsonc
@@ -101,10 +101,10 @@
     "bash": {
       "*": "ask",
       // basic inspection
+      "echo *": "ask",
       "ls*": "allow",
       "pwd*": "allow",
       "cat*": "allow",
-      "echo*": "allow",
       "head*": "allow",
       "tail*": "allow",
       "find*": "allow",
@@ -166,7 +166,6 @@
       "touch*": "ask",
       "rm *": "ask",
       // enivronment $VAR
-      "echo *$*": "deny",
       "printenv *": "deny",
       "env *": "deny",
       // .env / .envrc via shell