fix(ci): allow .claude/commands/ to be committed

The semgrep rule blocking .claude/ was intended to prevent local settings
files from being committed. Commands (skills) in .claude/commands/ are
meant to be shared project-wide, so we exclude them from this rule.

https://claude.ai/code/session_01J75nfVUa4uStAWJr5s168o
This commit is contained in:
mateo-berri 2026-06-01 22:31:43 +00:00
parent 43298d4b53
commit c03d7e3044
No known key found for this signature in database

View file

@ -1,16 +1,18 @@
rules:
- id: no-claude-directory-committed
message: >
.claude/ directory must not be committed to the repository.
It contains local Claude Code settings (permissions, worktree paths) that are
.claude/ settings files must not be committed to the repository.
They contain local Claude Code settings (permissions, worktree paths) that are
developer-machine-specific and may expose internal paths or credentials.
Add .claude/ to .gitignore instead.
Add .claude/settings*.json to .gitignore instead.
severity: ERROR
languages: [generic]
paths:
include:
- "/.claude/**"
- "/.claude/*"
exclude:
- "/.claude/commands/**"
pattern-regex: '[\s\S]+'
metadata:
category: security