Repository Issue Activity (beta)

#408 False positive: SSH ffmpeg payload matches git branch dynamic token

#407 [False Negative] redirect-truncate-root-home is bypassed by any relative spelling of the same path, including the .git internals the rule claims to protect (0.14.3)

#406 [FR] allow opting out of core.filesystem

#404 [False Positive] `redirect-truncate-dynamic-path`: a real redirect inside an inline-shell payload is denied whenever the segment carries a redirect, whenever the payload's quotes arrive backslash-escaped, and whenever a quoted `>` elsewhere in the command tips it over — two read-only commands that each pass are denied when concatenated (residue of #317, present in v0.14.2)

#394 [False Positive] database.mysql:truncate-table denies non-SQL file operands (`cat truncate x`)

#401 False positive: pwsh assignment-LHS compounds ($x = Get-ChildItem ...) deny with no addressable rule ID

#405 [False Positive] Read-only git status in a directory loop is blocked (v0.14.1)

#403 False positive: Tailwind's `truncate` class matches the SQL truncate-table rule in 3 packs

#402 dcg: an external pack with no `keywords` is listed as enabled, validates clean, and is silently never evaluated — including on the hook path

#390 [False Positive] `core.filesystem:redirect-truncate-root-home` denies creating an absent file under $HOME outside a VCS worktree, while `>>` to the same path is allowed (0.14.0)

#393 core.git:restore-worktree matches across the heredoc boundary (git commit -F - false positive)

#391 doctor misclassifies malformed Codex hooks.json as untrusted

#400 [False Negative] dashed core.git executables (`git-reset`, `git-clean`, `git-checkout`) bypass core.git

#399 [False Negative] awk `system()` and print-to-pipe payloads are never extracted

#398 [False Negative] `osascript -e 'do shell script …'` and JXA `$.system(…)` payloads are never extracted

#397 [False Negative] `bun -e` inline payload is not extracted while the identical `node -e` payload is denied

#396 [False Positive] rm-rf-general does not fold a literal assignment or `$(mktemp -d)` that redirect-truncate-dynamic-path already folds

#395 [False Positive] rm-rf-general denies `rm -rf -- /tmp/<dir>/…`: the end-of-options guard costs the literal temp exemption

#389 `dcg --version` aborts with SIGABRT when its output is a closed pipe: EPIPE panics in `print_version`, and `panic = "abort"` turns it into a coredump (0.14.0)

#388 feat: Support crush coding agent

#387 allowlist add --path <glob> scoping ignores the hooks cwd (JSON field and embedded cd both) - matches only the process own getcwd()

#386 redaction_mode = "pattern" (the history default) has no secret patterns since v0.2.11 — history.db and general.log_file store secrets verbatim

#385 feat: add destructive-command coverage for the Azure DevOps CLI extension

#384 feat: broaden Azure CLI destructive-command coverage, including az account

#382 heredoc.shell:launcher-unverified still fires on quoted heredocs piped to non-shell interpreters (python3 -, ruby -, node -)