5b5f28560d
All checks were successful
PR build (required check) / changes (pull_request) Successful in 6s
secrets-guard / encrypted (pull_request) Successful in 7s
PR build (required check) / build-backend (pull_request) Has been skipped
shell-lint / shellcheck (pull_request) Successful in 7s
PR build (required check) / build-frontend (pull_request) Has been skipped
PR build (required check) / validate-observability (pull_request) Has been skipped
PR build (required check) / gate (pull_request) Successful in 2s
It was untracked but not ignored, so a single `git add -A` would have committed one operator's local permission allowlist — including which vault secrets they may decrypt — as shared repo config. `.claude/settings.json` stays tracked as the reviewed team config.
10 lines
513 B
Text
10 lines
513 B
Text
|
|
# Claude Code worktrees. These are other sessions' checkouts living inside this
|
|
# repo; `git add -A` will otherwise commit them as embedded git repositories.
|
|
.claude/worktrees/
|
|
|
|
# Per-operator Claude Code settings — local permission grants, not team config.
|
|
# Untracked but not ignored meant one `git add -A` would publish one operator's
|
|
# allowlist (including which secrets they may decrypt) to everyone.
|
|
# `.claude/settings.json` IS tracked and stays the shared, reviewed config.
|
|
.claude/settings.local.json
|