{
  "permissions": {
    "allow": [
      "Bash(tail:*)"
    ],
    "deny": [
      "Bash(rm -rf:*)",
      "Bash(rm -fr:*)",
      "Bash(sudo rm:*)",
      "Bash(chmod -R 777:*)",
      "Bash(chmod 777:*)",
      "Bash(dd:*)",
      "Bash(mkfs:*)",
      "Bash(git push --force:*)",
      "Bash(git push -f:*)",
      "Bash(curl* | sh)",
      "Bash(curl* | bash)",
      "Bash(wget* | sh)",
      "Bash(wget* | bash)",
      "Bash(ssh:*)",
      "Bash(scp:*)",
      "Read(./**/config.local.php)",
      "Read(./**/config_local.py)",
      "Read(./**/secrets.h)",
      "Read(./**/.env)",
      "Read(./**/.env.*)",
      "Read(./**/*.pem)",
      "Read(./**/id_rsa)",
      "Read(./**/id_ed25519)"
    ]
  }
}