git-guardrails-claude-code

You can block dangerous git commands by installing a PreToolUse hook that intercepts operations like git push, reset --hard, clean, and branch -D before execution. Copy the hook script, make it executable, and update your .claude/settings.json to enable it.

A PreToolUse hook intercepts destructive git operations including git push, reset --hard, clean, branch -D, and checkout/restore. It aborts these unauthorized operations before Claude runs them, providing clear feedback when a blocked command is encountered.

You can configure git guardrails in both project scope and global scope. Update the .claude/settings.json file for project-specific protection, or update ~/.claude/settings.json to apply the PreToolUse hook guardrails across all your Claude Code sessions.

Yes, jq is required as a dependency to set up this git command blocking mechanism. You need it installed in your environment before copying the block-dangerous-git.sh script and updating your settings configuration to enable the PreToolUse hook.

Using a PreToolUse hook provides automated guardrails that intercept and abort dangerous git commands before execution, preventing accidental data loss. Unlike manual checks, it ensures destructive operations like reset --hard and clean are consistently blocked before Claude runs them.

The shell script hook specifically targets predefined dangerous git commands like push, reset --hard, clean, branch -D, and checkout/restore. It requires manual installation steps including copying the script, making it executable, and updating settings files for either project or global scope.