git-guardrails-claude-code

To block dangerous git commands in Claude Code, you can install a PreToolUse hook that intercepts Bash commands and returns a BLOCKED message with exit code 2 before execution. This prevents force pushes, hard resets, and destructive cleans.

Yes, you can customize blocked git patterns in the shell script. The setup lets you adjust patterns to stop commands like push, reset --hard, clean -f, branch -D, checkout ., and restore . before they execute.

A PreToolUse hook intercepts Bash commands by integrating a shell script with Claude settings file configuration. When a command matches dangerous patterns, the script returns a BLOCKED message with exit code 2 to stop execution.

Yes, you need jq and grep installed as dependencies to run the git command blocking hook. These tools process command pattern matching and settings file integration for the PreToolUse hook in Claude Code.

To verify git command blocking, run a quick test with a dangerous command like reset --hard. The hook should intercept the Bash command and return a BLOCKED response with exit code 2, confirming your repository protection is active.

You can apply git guardrails to either a single project or all projects. The PreToolUse hook settings can be merged safely into existing Claude configuration, allowing flexible scope for repository protection during development.