mirror of
https://github.com/hanzoai/datastore.git
synced 2026-10-30 14:48:37 +00:00
George LarionovandClaude Opus 4.8
3718e79f3d
- Gate flaky history on direct master rows: pull_request_number = 0 also matches release branches (head_ref='26.5') and merge-queue refs (gh-readonly-queue/master/...), so add head_ref = 'master' to the gate and the per-failure detail query. - Remove the play.clickhouse.com curl allow from BOTH profiles. A wildcard curl allow cannot be constrained to read-only bodies (curl --data-binary @<file> or $(cat <file>) would exfiltrate local files to the public endpoint), so it is left prompt-gated everywhere. .claude/settings.json is back to master. https://github.com/ClickHouse/ClickHouse/pull/107085 Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
35 lines
769 B
JSON
35 lines
769 B
JSON
{
|
|
"permissions": {
|
|
"allow": [
|
|
"Bash(gh pr view:*)",
|
|
"Bash(gh pr list:*)",
|
|
"Bash(gh pr checks:*)",
|
|
"Bash(gh pr diff:*)",
|
|
"Bash(gh pr status:*)",
|
|
"Bash(gh issue view:*)",
|
|
"Bash(gh issue list:*)",
|
|
"Bash(gh repo view:*)",
|
|
"Bash(gh search:*)",
|
|
"Bash(gh run view:*)",
|
|
"Bash(git log:*)",
|
|
"Bash(git show:*)",
|
|
"Bash(git status)",
|
|
"Bash(git rev-parse:*)",
|
|
"Bash(git remote -v)",
|
|
"Bash(ls:*)",
|
|
"Bash(cat:*)",
|
|
"Bash(head:*)",
|
|
"Bash(tail:*)",
|
|
"Bash(grep:*)",
|
|
"Bash(wc:*)",
|
|
"Bash(jq:*)",
|
|
"Bash(which:*)",
|
|
"Bash(strings:*)",
|
|
"Bash(nm:*)",
|
|
"Bash(pwd)",
|
|
"WebFetch(domain:github.com)",
|
|
"WebSearch(*)"
|
|
]
|
|
}
|
|
}
|