Permissions for Claude Code.

settings.json

{
  "includeCoAuthoredBy": false,
  "permissions": {
    "allow": [
      "Bash(find :*)",
      "Bash(git branch :*)",
      "Bash(git diff :*)",
      "Bash(git log :*)",
      "Bash(git remote :*)",
      "Bash(git reset --hard :*)",
      "Bash(git reset --soft :*)",
      "Bash(git show :*)",
      "Bash(git status :*)",
      "Bash(grep :*)",
      "Bash(pnpm compile :*)",
      "Bash(pnpm test :*)"
    ],
    "deny": [
      "Bash(* /etc/*)",
      "Bash(* /proc/*)",
      "Bash(* /root/*)",
      "Bash(* /sys/*)",
      "Bash(apt purge :*)",
      "Bash(apt remove :*)",
      "Bash(apt-get purge :*)",
      "Bash(apt-get remove :*)",
      "Bash(chmod +x /etc:*)",
      "Bash(chmod +x /root:*)",
      "Bash(chmod 777 :*)",
      "Bash(chown :*)",
      "Bash(curl file://:*)",
      "Bash(curl ftp://:*)",
      "Bash(del :*)",
      "Bash(find / -delete:*)",
      "Bash(find /etc :*)",
      "Bash(find /proc :*)",
      "Bash(find /root :*)",
      "Bash(find /sys :*)",
      "Bash(git push :*)",
      "Bash(kill -9 :*)",
      "Bash(killall :*)",
      "Bash(pkill :*)",
      "Bash(rd :*)",
      "Bash(rm :*)",
      "Bash(rmdir :*)",
      "Bash(scp :*)",
      "Bash(ssh :*)",
      "Bash(sudo :*)",
      "Bash(wget :*)",
      "Bash(xargs :*)",
      "Read(*.cert)",
      "Read(*.crt)",
      "Read(*.env)",
      "Read(*.env.*)",
      "Read(*.key)",
      "Read(*.pem)",
      "Read(id_dsa:*)",
      "Read(id_ecdsa:*)",
      "Read(id_ed25519:*)",
      "Read(id_rsa:*)"
    ]
  }
}

Further reading

https://docs.anthropic.com/en/docs/claude-code/settings#available-settings
https://docs.claude.com/en/docs/claude-code/iam#tool-specific-permission-rules