Skip to content

v2.0.0

Choose a tag to compare

View all tags
@github-actions github-actions released this 10 Aug 01:26
· 4 commits to main since this release
v2.0.0
313c2f4

V2 is a ground-up rebuild: one installer for twelve coding CLIs, secret protection, a policy GUI, and a rebuilt evaluation engine with decision tracing.

Upgrading from v1? One command upgrades every installed integration:
npx -y cc-safety-net@latest update. If you defined custom rules under v1, see
Upgrading from an older version.

Renamed: safety-net → cc-safety-net

The plugin, npm package, and CLI are now uniformly named cc-safety-net. Claude Code marketplace installs migrate automatically; no action is needed.

Highlights

  • Universal installer — interactive install / uninstall / update across all twelve supported agent CLIs (Claude Code, Codex, Cursor, Gemini CLI, Copilot CLI, OpenCode, Amp, Pi, and more).
  • Secret protection — built-in rules block access to SSH keys, .env files, cloud credentials, and coding-CLI credential stores, across shell commands and file tools.
  • Rebuilt evaluation engine — canonical command IR, immutable policy snapshots, and an ordered guard pipeline with decision tracing via explain.
  • Always-on catastrophic protections — recursive deletion of root or home, Git metadata mutation, and policy-file tampering are blocked in every mode.
  • Safety presets — standard / strict / paranoid with per-rule overrides, trusted delete allow-paths, and env vars that can only raise protection.
  • Policy GUI — cc-safety-net gui serves a local, token-authenticated policy editor with live preset preview.
  • Audit trail — allowed and blocked decisions logged to local per-project JSONL with secret redaction; browse with cc-safety-net logs.
  • Documented threat model — the SECURITY.md mode contract, explicit resource limits, and a residual-risk registry.

Get started

npx -y cc-safety-net@latest install

Full documentation: https://ccsafetynet.com/docs

Full changelog: v1.0.6...v2.0.0

Assets 4
Loading