From f89bc9bc9ac9f1c7f226d32b3f267f53b99f208f Mon Sep 17 00:00:00 2001 From: zukki259 Date: Sun, 23 Aug 2026 15:11:07 +0900 Subject: [PATCH] Deny Claude Code access to .env files Co-Authored-By: Claude Opus 5 --- .claude/settings.local.json | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/.claude/settings.local.json b/.claude/settings.local.json index 8b69b93..8e5aaf2 100644 --- a/.claude/settings.local.json +++ b/.claude/settings.local.json @@ -15,6 +15,11 @@ "Bash(curl -s -o /dev/null -w \"%{http_code}\\\\n\" http://localhost:8000/health --max-time 5)", "Bash(curl -s -N -X POST http://localhost:8000/chat/stream -H \"Content-Type: application/json\" -d '{\"message\":\"latest news about python 3.14 release\",\"model\":\"bedrock/jp.anthropic.claude-sonnet-4-6\"}' --max-time 60)", "Bash(curl -s -N -X POST http://localhost:8000/chat/stream -H \"Content-Type: application/json\" -d '{\"message\":\"latest news about python 3.14 release\",\"model\":\"bedrock/jp.anthropic.claude-sonnet-4-6\"}' --max-time 90)" + ], + "deny": [ + "Read(**/.env)", + "Edit(**/.env)", + "Bash(*.env)" ] } }