SERVER-120254 Add Claude Code hook to only allow writes to authorized files (#48903)

GitOrigin-RevId: 8d465bb8e3998cbf583310d2c0836fbf6cf4eafb
2026-03-04 16:43:10 -05:00
parent daa98e188f
commit 31c8b232b7
3 changed files with 4 additions and 0 deletions
--- a/buildscripts/sync_repo_with_copybara.py
+++ b/buildscripts/sync_repo_with_copybara.py
@@ -31,6 +31,7 @@ EXCLUDED_PATTERNS = [
    "sbom.private.json",
    ".augment/",
    ".cursor/",
+    ".claude/",
    "AGENTS.md",
    ".github/CODEOWNERS",
    "monguard/",
--- a/buildscripts/tests/test_sync_repo_with_copybara.py
+++ b/buildscripts/tests/test_sync_repo_with_copybara.py
@@ -313,6 +313,7 @@ class TestSkyExclusionChecks(unittest.TestCase):
                        "sbom.private.json",
                        ".augment/**",
                        ".cursor/**",
+                        ".claude/**",
                        "AGENTS.md",
                        ".github/CODEOWNERS",
                        "monguard/**",
@@ -337,6 +338,7 @@ class TestSkyExclusionChecks(unittest.TestCase):
                        "sbom.private.json",
                        ".augment/**",
                        ".cursor/**",
+                        ".claude/**",
                        "AGENTS.md",
                        ".github/CODEOWNERS",
                        "monguard/**",
--- a/copy.bara.sky
+++ b/copy.bara.sky
@@ -29,6 +29,7 @@ def make_workflow(workflow_name, destination_url, source_ref, destination_ref):
            "sbom.private.json",
            ".augment/**",
            ".cursor/**",
+            ".claude/**",
            "AGENTS.md",
            ".github/CODEOWNERS",
            "monguard/**",