Skip to content

[Docs] Document destructive command guard approvals #20

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
zoomote wants to merge 1 commit into
base: main
Choose a base branch
from
Draft

[Docs] Document destructive command guard approvals #20

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
13 changes: 13 additions & 0 deletions docs/features/auto-approving-actions.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,6 +92,19 @@ The dropdown shows a grid of permission tiles. Controls:

---

### Destructive Command Guard

The **Enable destructive command guard** setting is available under the **Execute** permission in Auto-Approve Settings. When the Execute permission and this setting are enabled, Zoo evaluates terminal commands with Destructive Command Guard (DCG) before running them automatically.

- Commands allowed by DCG run automatically.
- Commands blocked by DCG show the matched reason or rule and require an explicit one-time decision.
- Choosing **Deny** does not run the command; choosing **Approve** runs that command once.
- While DCG is enabled, Zoo's allowed and denied command-prefix lists do not apply.

Zoo verifies the DCG download when you enable the setting. If DCG is unavailable for your platform or cannot be installed, Zoo leaves the setting disabled and shows an error.

---

## Global Enabled Switch

<img src="/img/auto-approving-actions/auto-approving-actions-21.png" alt="Auto-Approve dropdown; Enabled at bottom-right and All/None chips at bottom-left" width="600" />
Expand Down
Loading