Bash Allow Rules With a Wildcard Before the Subcommand Match More Than You Wrote
Claude Code Changelog·high signal
Claude Code 2.1.246 adds a startup warning for Bash allow rules that place a wildcard before the subcommand, giving `Bash(git * main)` as the example, "since they also match options inserted before the subcommand." A rule you read as "git something main" also permits `git -c core.pager=<anything> ... main`, which is the same shape as the qwen-code and mcp-shell git-alias bypasses filed this week. Grep your settings.json for allow rules with a `*` that is not at the end.