fix(security): protect .docker, .azure, and .config/gh from read and write

2026-03-31 21:08:06 +03:00
parent c94a5fa1b2
commit 655eea2db8
2 changed files with 4 additions and 1 deletions
--- a/tools/file_operations.py
+++ b/tools/file_operations.py
@@ -71,6 +71,9 @@ WRITE_DENIED_PREFIXES = [
        os.path.join(_HOME, ".kube"),
        "/etc/sudoers.d",
        "/etc/systemd",
+        os.path.join(_HOME, ".docker"),
+        os.path.join(_HOME, ".azure"),
+        os.path.join(_HOME, ".config", "gh"),
    ]
 ]