fix: forbid coding agents to read any .env files in the repo #148 (#149)

navalnica · web-flow · commit 14b9edb24127 · 2026-02-17T11:24:00.000+01:00
diff --git a/.claude/settings.json b/.claude/settings.json
@@ -7,7 +7,7 @@
       "Bash(make test_unit:*)"
     ],
     "deny": [
-      "Read(./.env)"
+      "Read(**/*.env)"
     ],
     "ask": []
   },
diff --git a/.cursorignore b/.cursorignore
@@ -0,0 +1 @@
+**/*.env
diff --git a/Makefile b/Makefile
@@ -49,7 +49,7 @@ statgpt_app:
 	poetry run python -m statgpt.app.app $(ARGS)
 
 install_pre_commit_hooks:
-	pre-commit install
+	poetry run pre-commit install
 
 db_migrate:
 	poetry run alembic -c alembic.ini upgrade head
