Claude Code bypasses found; new hook blocks force pushes

A security researcher tested 22 methods to bypass Claude Code's rules for preventing force pushes to main branches, finding that 15 of the methods initially succeeded. While Claude Code's built-in deny rules blocked 7 attempts, the remaining 15 were only stopped by a broader "allow" rule or required user approval. The researcher developed a PreToolUse hook that analyzes the full command before execution, effectively blocking all 22 methods, including those that used command wrappers or scripts. AI

IMPACT Enhances safety controls for AI coding assistants, preventing accidental or malicious code overwrites on shared repositories.

RANK_REASON The item details a specific method for improving the safety features of an existing AI product, Claude Code, by developing a new hook to block unwanted actions.

Read on dev.to — Claude Code tag →

• Bash
• Claude Code
• GitHub
• git push -f *
• git push --force *
• git push * main
• Haiku
• PreToolUse

• product
• safety

AI-generated summary · Google Gemini · from 1 sources. How we write summaries →