commands
1 guardrails, all at version v1.
| Guardrail | Default severity | What it checks |
|---|---|---|
commands/forbidden-invocation | error | No command the build ran matched the executable and arguments this guardrail is configured to look for. |
Shared collectors
Every commands guardrail receives the facts these collectors gather. Individual guardrails can ask for more collectors of their own.
| Collector | Gathers |
|---|---|
commands | Every command the build executed, read from the session a running buildnote monitor records on the runner. This is what the job actually ran, not what a pipeline file says it would run. |
You configure every guardrail in this category the same way, in the guardrails.checks array of buildnote.json. Configuring guardrails lists every option, and Guardrails lets you search the whole library.