block-mutable-image-push

━━ when it runs

• PreToolUsebefore the tool call runs. a denial here means the command never executes at all.

watchesevery tool the event fires for — not narrowed to particular tools

this pack enforces: a match returns a real denial rather than being recorded and discarded. what the denial then does depends on the event above.

━━ install

this one is on by default — taking the pack without flags turns it on, and the picker shows it pre-ticked.

• just this policy$failproofai policies add chhhee10/deploy-guard --policy block-mutable-image-push⧉ copy
• the whole pack$failproofai policies add chhhee10/deploy-guard⧉ copy
• turn just this off$failproofai policies remove block-mutable-image-push⧉ copy
• pick from a list$failproofai policies add⧉ copy
• uninstall the pack$failproofai policies remove chhhee10/deploy-guard⧉ copy

ships in chhhee10/deploy-guard · v1.0.0 · source ↗

━━ also in deploys

• block-prod-deployBlock one-command deploys to production (vercel, fly, netlify, wrangler, serverless, eb)
• warn-migration-deployAsk for a rollback plan before running a database migration