git-guardrails-claude-code

Block destructive git commands in Claude Code by installing a PreToolUse hook script that intercepts Bash tool inputs, matches dangerous patterns like git push or reset --hard, and exits nonzero to halt execution.

Safety guardrails should intercept destructive automated version control actions including force pushes, hard resets, git clean, branch deletion, and checkout or restore operations that overwrite workspace contents.

A PreToolUse hook prevents accidental repository damage by parsing tool_input.command before execution, matching it against dangerous git patterns, and outputting a clear blocked message to stderr if a match is found.

You can apply git safety guardrails globally across all Claude Code projects or scope them to a single project by configuring the hook script placement and settings.json accordingly.

Yes, you need jq and grep installed because the command blocking hook script relies on them to parse the JSON tool input and match dangerous git command patterns.

The best way to stop force pushes and hard resets in automated devops workflows is deploying a PreToolUse hook that scans Bash commands for destructive git patterns and blocks execution before it starts.