git-guardrails-claude-code

To block dangerous git commands in Claude Code, install a PreToolUse hook script that intercepts and prevents destructive operations like git push --force and git reset --hard before execution. This ensures branch integrity during automated workflows.

A pre-tool hook intercepts destructive git operations including git push variants, git reset --hard, git clean -f, git branch -D, and git checkout . or git restore . to prevent accidental repository history loss or branch deletion.

Yes, you can scope git guardrails per-project by configuring the PreToolUse hook in .claude/settings.json, or apply them globally across all workflows by deploying the script to ~/.claude/settings.json.

Yes, jq is required as a dependency to install and operate the git safety hooks for Claude Code, as the PreToolUse script relies on it to parse and process the hook configuration data effectively.

To validate that dangerous git operations are blocked, attempt to execute a restricted command like git reset --hard after configuring the PreToolUse hook, and confirm the script intercepts and prevents the action successfully.

A PreToolUse hook provides agent safety by intercepting destructive git commands at the Claude Code application layer before they reach the terminal, preventing high-risk actions that standard git hooks cannot block during automated workflows.