fix(security): protect .docker, .azure, and .config/gh from read and write

2026-03-31 12:47:10 -07:00
parent c94a5fa1b2
commit 655eea2db8
2 changed files with 4 additions and 1 deletions
@@ -71,6 +71,9 @@ WRITE_DENIED_PREFIXES = [
        os.path.join(_HOME, ".kube"),
        "/etc/sudoers.d",
        "/etc/systemd",
+        os.path.join(_HOME, ".docker"),
+        os.path.join(_HOME, ".azure"),
+        os.path.join(_HOME, ".config", "gh"),
    ]
 ]