$ cat /var/log/thoughts

CLI + Developer Tools + Security

Posts matching all selected tags.

Filters3

6 posts

Bash allow wildcards match options before subcommands

Bash allow wildcards match options before subcommands. Put the star after git log or git commit. A deny on git push does not close the documented -c hole.

Strong OpinionsClaude CodeAI CodingSecurityDeveloper ToolsCLIGit1 min read · Aug 25, 2026

Claude channels from Telegram without granting root

Claude Code channels let Telegram hit a live local session. Launch it in Manual mode, skip-permissions stays off, and deny the git push on the laptop.

Build AlongClaude CodeAI CodingDeveloper ToolsMCPSecurityCLI1 min read · Aug 25, 2026

A Claude Code dev container is the sandbox you skipped

A claude code dev container puts the CLI in Docker so bash cannot see the host home. Persist login with CLAUDE_CONFIG_DIR, then rebuild and prove isolation.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIDockerVS CodeSecurity1 min read · Aug 25, 2026

Keep auto mode on and still make git push ask

Auto mode git push still prompts if you add an ask rule. Keep auto mode on. The new Auto mode tab is the classifier notebook. Ask is the real checkpoint.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIGitSecurity1 min read · Aug 25, 2026

Write settings.json without granting git star main

Write Claude Code settings that allow git commit and git log without a star before the subcommand. Restart with no 2.1.246 warning, and git push still asks.

Build AlongClaude CodeAI CodingDeveloper ToolsCLIGitSecurity1 min read · Aug 25, 2026

JFrog Boost almost granted rm rf on Always Allow

JFrog Boost almost turned Always Allow into rm rf. After boost init, read the first token on the permission card. Bless ls if you want. Never bless the wrapper.

Strong OpinionsAI CodingClaude CodeDeveloper ToolsSecurityCLI1 min read · Aug 23, 2026