no-wildcard-secret-read-permission · Text

Why

A wildcard allow entry can preapprove secret-value reads beyond the particular command reviewed. Its reach depends on the wildcard position, command arguments, and available credentials.

Fix

Remove the wildcard permission. Allow a narrowly scoped wrapper that validates an explicit secret name, or require interactive approval for each secret-value read.

Examples

Before — flagged Do not preapprove every secret-value read

{ "permissions": { "allow": ["Bash(gcloud secrets versions access:*)"] } }

After — preferred A wrapper requires a separate review of its validation

{ "permissions": { "allow": ["Bash(make pull-development-secrets)"] } }

Files

.claude/settings*.json**/.claude/settings*.json