41 lines
1010 B
TOML
41 lines
1010 B
TOML
cli_auth_credentials_store = "file"
|
|
approval_policy = "never"
|
|
check_for_update_on_startup = false
|
|
web_search = "disabled"
|
|
default_permissions = "agentci-read"
|
|
|
|
[shell_environment_policy]
|
|
inherit = "core"
|
|
exclude = ["*TOKEN*", "*SECRET*", "*KEY*", "AGENTCI_*", "GITEA_*"]
|
|
|
|
[permissions.agentci-read]
|
|
description = "Read a workflow repository without modifying it or using the network."
|
|
|
|
[permissions.agentci-read.filesystem]
|
|
":minimal" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-read.filesystem.":workspace_roots"]
|
|
"." = "read"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-write]
|
|
description = "Edit a workflow repository without changing Git metadata."
|
|
|
|
[permissions.agentci-write.filesystem]
|
|
":minimal" = "read"
|
|
glob_scan_max_depth = 5
|
|
|
|
[permissions.agentci-write.filesystem.":workspace_roots"]
|
|
"." = "write"
|
|
".git" = "read"
|
|
"**/*.env" = "deny"
|
|
|
|
[permissions.agentci-write.network]
|
|
enabled = true
|
|
allow_local_binding = false
|
|
|
|
[permissions.agentci-write.network.domains]
|
|
"*" = "allow"
|