goose icon indicating copy to clipboard operation
goose copied to clipboard

Restrict access to files or paths

Open thomax opened this issue 10 months ago • 2 comments

Sorry in advance if this has come up earlier!

When discussing code with Goose, it's very practical to give it access to the OS path where the code project is located. However, this would give Goose access to e.g. .env files nested within the project, which in turn might contain secret keys or passwords. Is there a way to make Goose and all of its extensions unable to access some files or paths? If not, this is an important feature any security minded developer needs. A .gooseignore file (just like .gitignore) could be one way of solving this?

thomax avatar Feb 04 '25 13:02 thomax

If no one else is currently working on this, I'd like to take a look :)

ZhenLian avatar Feb 05 '25 22:02 ZhenLian

@ZhenLian contribution very welcome!

I think a .gooseignore is a great idea and we could ensure it is skipped in file reads at a minimum

baxen avatar Feb 07 '25 06:02 baxen

Closing this since it is done, here is a documentation https://block.github.io/goose/docs/guides/using-gooseignore/. Thanks @ZhenLian for your contribution

meenalc avatar Mar 20 '25 06:03 meenalc