policies / goose.yml

Goose Policy

Allows access to the minimum binaries and locations needed by Goose. Intentionally does NOT include any additional, potentially invasive tools like sh, bash, git, etc.

coding-agent block

Include

stonewall policy include https://stonewall.sh/policies/goose.yml

Source

Raw file · On GitHub

# $schema: https://stonewall.sh/schema.json

####################################################################################
# This is an official stonewall.sh policy and should not be changed locally.       #
# Please always review remote policies before applying them. Stonewall and its     #
# policies come without warranty of any kind. See LICENSE for details.             #
####################################################################################

policy:
  name: Goose
  url: https://stonewall.sh/policies/goose.yml
  tier: 3
  tags:
    - coding-agent
    - block
  description: >
    Allows access to the minimum binaries and locations needed by Goose.
    Intentionally does NOT include any additional, potentially invasive tools like
    sh, bash, git, etc.
bin:
  allowed:
    - goose
expose:
  write:
    - ~/.config/goose
    - ~/.local/share/goose
    - ~/.local/state/goose