- Add memguard dependency - Update ReadPassphrase to return LockedBuffer - Update EncryptWithPassphrase/DecryptWithPassphrase to accept LockedBuffer - Remove string wrapper functions - Update all callers to create LockedBuffers at entry points - Update interfaces and mock implementations
30 lines
702 B
JSON
30 lines
702 B
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(go mod why:*)",
|
|
"Bash(go list:*)",
|
|
"Bash(~/go/bin/govulncheck -mode=module .)",
|
|
"Bash(go test:*)",
|
|
"Bash(grep:*)",
|
|
"Bash(rg:*)",
|
|
"Bash(find:*)",
|
|
"Bash(make test:*)",
|
|
"Bash(go doc:*)",
|
|
"Bash(make fmt:*)",
|
|
"Bash(make:*)",
|
|
"Bash(golangci-lint run:*)",
|
|
"Bash(git add:*)",
|
|
"Bash(gofumpt:*)",
|
|
"Bash(git stash:*)",
|
|
"Bash(git commit:*)",
|
|
"Bash(git push:*)",
|
|
"Bash(golangci-lint:*)",
|
|
"Bash(git checkout:*)",
|
|
"Bash(ls:*)",
|
|
"WebFetch(domain:golangci-lint.run)",
|
|
"Bash(go:*)",
|
|
"WebFetch(domain:pkg.go.dev)"
|
|
],
|
|
"deny": []
|
|
}
|
|
} |