feat: Sync Claude settings from Elu-co-jp projects

.devcontainer/claude-settings.json

@@ -19,6 +19,8 @@
       "WebFetch(domain:www.assemblyai.com)",
       "WebFetch(domain:ai-sdk.dev)",
       "WebFetch(domain:vercel.com)",
+      "WebFetch(domain:linear.app)",
+      "WebFetch(domain:docs.speechmatics.com)",
       "mcp__ide__getDiagnostics",
       "Bash(ls:*)",
       "Bash(cat:*)",
@@ -56,6 +58,9 @@
       "Bash(paste:*)",
       "Bash(tee:*)",
       "Bash(host:*)",
+      "Bash(ping:*)",
+      "Bash(netstat:*)",
+      "Bash(ss:*)",
       "Bash(lsof:*)",
       "Bash(pkill:*)",
       "Bash(kill:*)",
@@ -126,6 +131,7 @@
       "Bash(npx vitest:*)",
       "Bash(npx vitest run:*)",
       "Bash(npx vitest list:*)",
+      "Bash(vitest list:*)",
       "Bash(npx playwright:*)",
       "Bash(npx playwright test:*)",
       "Bash(npx husky:*)",
@@ -161,6 +167,7 @@
       "Bash(git tag:*)",
       "Bash(git rev-parse:*)",
       "Bash(git check-ignore:*)",
+      "Bash(git clean:*)",
       "Bash(gh:*)",
       "Bash(gh pr:*)",
       "Bash(gh pr list:*)",
@@ -208,6 +215,13 @@
       "mcp__plugin_supabase-toolkit_supabase__list_tables",
       "mcp__plugin_supabase-toolkit_supabase__get_project_url",
       "mcp__plugin_supabase-toolkit_supabase__search_docs",
+      "mcp__plugin_supabase-toolkit_supabase__get_logs",
+      "mcp__supabase__list_projects",
+      "mcp__supabase__list_branches",
+      "mcp__supabase__get_logs",
+      "mcp__supabase__list_tables",
+      "mcp__supabase__list_edge_functions",
+      "mcp__linear__get_issue",
       "mcp__o3__o3-search",
       "Bash(psql:*)",
       "Bash(PGPASSWORD=postgres psql:*)",
@@ -293,6 +307,7 @@
       "Bash(shellcheck:*)",
       "Bash(cloc:*)",
       "Bash(bats:*)",
+      "Bash(sqlite3:*)",
       "Bash(actionlint:*)",
       "Bash(command -v:*)",
       "Bash(op inject:*)",
@@ -312,21 +327,10 @@
       "Read(//home/vscode/**)",
       "Read(//tmp/**)",
       "Read(//workspaces/**)",
-      "Skill(plugin-dev:command-development)"
+      "Skill(plugin-dev:command-development)",
+      "Skill(vercel:logs)"
     ],
     "deny": [
-      "Bash(npx supabase db push)",
-      "Bash(npx supabase db push:*)",
-      "Bash(supabase db push)",
-      "Bash(supabase db push:*)",
-      "Bash(npx supabase migration squash)",
-      "Bash(npx supabase migration squash:*)",
-      "Bash(supabase migration squash)",
-      "Bash(supabase migration squash:*)",
-      "Bash(npx supabase migration repair)",
-      "Bash(npx supabase migration repair:*)",
-      "Bash(supabase migration repair)",
-      "Bash(supabase migration repair:*)",
       "Bash(npx supabase db branch delete)",
       "Bash(npx supabase db branch delete:*)",
       "Bash(supabase db branch delete)",
@@ -339,10 +343,6 @@
       "Bash(git reset --hard:*)",
       "Bash(helm uninstall)",
       "Bash(helm uninstall:*)",
-      "Bash(supabase db reset)",
-      "Bash(supabase db reset:*)",
-      "Bash(npx supabase db reset)",
-      "Bash(npx supabase db reset:*)",
       "Bash(supabase functions)",
       "Bash(supabase functions:*)",
       "Bash(kubectl delete namespace:*)",
@@ -354,6 +354,25 @@
       "Bash(rm -rf /)",
       "Bash(rm -rf /*)"
     ],
-    "ask": []
+    "ask": [
+      "mcp__plugin_supabase-toolkit_supabase__execute_sql",
+      "mcp__supabase__execute_sql",
+      "Bash(npx supabase db push)",
+      "Bash(npx supabase db push:*)",
+      "Bash(supabase db push)",
+      "Bash(supabase db push:*)",
+      "Bash(npx supabase migration squash)",
+      "Bash(npx supabase migration squash:*)",
+      "Bash(supabase migration squash)",
+      "Bash(supabase migration squash:*)",
+      "Bash(npx supabase migration repair)",
+      "Bash(npx supabase migration repair:*)",
+      "Bash(supabase migration repair)",
+      "Bash(supabase migration repair:*)",
+      "Bash(supabase db reset)",
+      "Bash(supabase db reset:*)",
+      "Bash(npx supabase db reset)",
+      "Bash(npx supabase db reset:*)"
+    ]
   }
 }

.trivyignore

@@ -0,0 +1,31 @@
+# Trivy Ignore File
+# This file contains CVEs that are intentionally ignored during security scans
+
+# Vercel CLI esbuild binary vulnerabilities (Go stdlib v1.18.3)
+# These are transitive dependencies that we cannot control directly
+# The vulnerabilities are in the esbuild binary bundled with Vercel CLI
+# and will be resolved when Vercel updates their esbuild dependency
+
+# CVE-2023-24538: golang: html/template: backticks not treated as string delimiters
+# Severity: CRITICAL
+# Affected: stdlib v1.18.3 (esbuild binary)
+# Fixed in: 1.19.8, 1.20.3
+# Reason: Transitive dependency via Vercel CLI, esbuild only used at build-time
+# Expected resolution: Wait for Vercel to update esbuild
+CVE-2023-24538
+
+# CVE-2023-24540: golang: html/template: improper handling of JavaScript whitespace
+# Severity: CRITICAL
+# Affected: stdlib v1.18.3 (esbuild binary)
+# Fixed in: 1.19.9, 1.20.4
+# Reason: Transitive dependency via Vercel CLI, esbuild only used at build-time
+# Expected resolution: Wait for Vercel to update esbuild
+CVE-2023-24540
+
+# CVE-2024-24790: golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses
+# Severity: CRITICAL
+# Affected: stdlib v1.18.3 (esbuild binary)
+# Fixed in: 1.21.11, 1.22.4
+# Reason: Transitive dependency via Vercel CLI, esbuild only used at build-time
+# Expected resolution: Wait for Vercel to update esbuild
+CVE-2024-24790