The Destructive Command Guard (dcg) is for blocking dangerous git and shell commands from being executed by agents.
active 2026-01-07 → 2026-08-07 (UTC)
Activity over time
Daily event counts in the loaded window
Line chart, 213 days from 2026-01-07 to 2026-08-07. Pushes: 724 total, peak 108 in a day. Pull requests: 18 total, peak 4 in a day. Issues: 22 total, peak 3 in a day. Comments: 60 total, peak 5 in a day. Stars: 254 total, peak 32 in a day.
- Pushes
- Pull requests
- Issues
- Comments
- Stars
Stars, PRs, issues and forks are under-captured in the later part of this window. GH Archive progressively stopped capturing non-push events during 2026 — −95% or worse by the end of the window. Every series here except Pushes fades for that reason, so a decline above reflects the archive, not this repository. Pushes stay reliable throughout, so read them, and the contributor counts derived from them, as the real signal. Data health has the measurements.
Top contributors
Pushes, PRs, issues, reviews and comments — stars and forks excluded, so this is contribution rather than popularity
| Contributor | Contributions | Pushes | PRs | Comments |
|---|---|---|---|---|
| Dicklesworthstone | 768 | 715 | 2 | 37 |
| dependabot[bot] | 38 | 9 | 11 | 18 |
| gjlondon | 2 | 0 | 1 | 1 |
| strefethen | 2 | 0 | 0 | 0 |
| hackel | 1 | 0 | 1 | 0 |
| lmello | 1 | 0 | 0 | 1 |
| tmchow | 1 | 0 | 0 | 1 |
| tom-pang | 1 | 0 | 0 | 0 |
| mvanhorn | 1 | 0 | 0 | 0 |
| Stef9332 | 1 | 0 | 0 | 1 |
| leonletto | 1 | 0 | 1 | 0 |
| shaynhornik | 1 | 0 | 0 | 1 |
| xuelongmu | 1 | 0 | 0 | 0 |
| bierlingm | 1 | 0 | 1 | 0 |
| yehoshuadimarsky | 1 | 0 | 0 | 0 |
| csteynberg | 1 | 0 | 1 | 0 |
| taspelund | 1 | 0 | 0 | 0 |
| joshuadavidthomas | 1 | 0 | 0 | 0 |
Recent activity
Latest issues, pull requests and releases
- Issue comment#284Dicklesworthstone2026-08-07 18:55Feature request: per-rule target-path exemptions (agent job-scratch dirs under $HOME collide with the redirect-truncate rules)
- Issue#291Dicklesworthstone2026-08-07 18:55Deny path blocks on an unbounded pending-exceptions file lock before the protocol denial is emitted
- Issue#285Dicklesworthstone2026-08-07 18:55core.filesystem: temp-directory allowlist has no Windows equivalent - %TEMP% is denied in all four spellings across both shells (Windows analogue of #244)
- Issue comment#285Dicklesworthstone2026-08-07 18:55core.filesystem: temp-directory allowlist has no Windows equivalent - %TEMP% is denied in all four spellings across both shells (Windows analogue of #244)
- Issue comment#283Dicklesworthstone2026-08-07 18:54[False Positive] Wrangler semantic fallback denies unrelated shell commands with no Wrangler token (v0.9.4)
- Issue#287Dicklesworthstone2026-08-07 18:54chmod-recursive-root false positive: non-recursive chmod blocked when another command in the chain has -r
- Issue#271Dicklesworthstone2026-08-04 14:27mise exec -c: redirect-only payloads still allowed — pack keyword quick-reject runs before Tier-1/Tier-2 extraction
- Issue comment#167Dicklesworthstone2026-06-27 04:04[False Negative] OpenTofu (tofu) commands bypass the infrastructure.terraform pack entirely
- Pull request#166csteynberg2026-06-27 00:19
- Issue comment#125Stef93322026-05-27 18:41Windows Codex hook installs and appears in UI but does not block shell commands
- Issue comment#125Dicklesworthstone2026-05-24 23:28Windows Codex hook installs and appears in UI but does not block shell commands
- Issue comment#124Dicklesworthstone2026-05-24 04:40[False Positive] core.git:push-force-long fires on git commit -m with multi-line message mentioning the substring
- Issue#124Dicklesworthstone2026-05-24 04:40[False Positive] core.git:push-force-long fires on git commit -m with multi-line message mentioning the substring
- Issue comment#125Dicklesworthstone2026-05-24 00:21Windows Codex hook installs and appears in UI but does not block shell commands
- Issue comment#124Dicklesworthstone2026-05-24 00:21[False Positive] core.git:push-force-long fires on git commit -m with multi-line message mentioning the substring
- Issue comment#123dependabot[bot]2026-05-18 23:07deps(deps): bump the rust-minor-patch group with 9 updates
- Pull request#123dependabot[bot]2026-05-18 23:07
- Pull request#122dependabot[bot]2026-05-18 23:05
- Pull request#117bierlingm2026-05-14 22:46
- Issue comment#115Dicklesworthstone2026-05-13 05:06Windows release binaries (v0.5.1) are Linux ELF executables — cannot run on native Windows
- Issue comment#114Dicklesworthstone2026-05-11 23:37Linux binaries still require GLIBC 2.39 — musl fix was reverted (reopening #34)
- Issue#112strefethen2026-05-10 20:17v0.5.1: dcg-aarch64-unknown-linux-gnu.tar.xz contains an x86-64 binary
- ReleaseDicklesworthstone2026-05-02 04:35v0.5.0
- ReleaseDicklesworthstone2026-05-01 06:04v0.4.9
- ReleaseDicklesworthstone2026-05-01 01:25v0.4.6
Totals cover only the window loaded into ClickHouse and count events, not GitHub's lifetime totals — 254 stars here means stars gained during the window, not the repo's star count.