commands
1 guardrails, all at version v1.
| Guardrail | Default severity | What it checks |
|---|---|---|
commands/forbidden-invocation | error | No command the build executed matched the executable and the arguments this guardrail was given to look for. |
Shared collectors
Every commands guardrail is handed the facts these collectors gather, and each one may ask for more of its own.
| Collector | Gathers |
|---|---|
commands | Every command the build executed, read from the session a running buildnote monitor records on the runner. Gathering is dynamic rather than static: this is what the job actually ran, not what a pipeline file says it would run. |
Every guardrail in this category is configured the same way, in the guardrails.checks array of buildnote.json. See Configuring guardrails for every option, and Guardrails to search the whole library.