From 183e44db62eaed8f40d5302e269dfd078b4aa519 Mon Sep 17 00:00:00 2001
From: christian-westerkam <christian@westerkam.org>
Date: Wed, 21 Oct 2026 00:30:36 +0200
Subject: [PATCH] Deny Claude Code pushes to main

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
---
 .claude/settings.json | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/.claude/settings.json b/.claude/settings.json
index d0e7b53..dfa13b0 100644
--- a/.claude/settings.json
+++ b/.claude/settings.json
@@ -16,7 +16,11 @@
       "Read(~/.aws/**)",
       "Read(~/.gnupg/**)",
       "Edit(.claude/settings.json)",
-      "Edit(.claude/settings.local.json)"
+      "Edit(.claude/settings.local.json)",
+      "Bash(git push origin main:*)",
+      "Bash(git push origin HEAD:main:*)",
+      "Bash(git push * main:*)",
+      "Bash(git push *:main:*)"
     ],
     "blockReadsOutsideWorkingDirectories": true,
     "ask": [