Protection Coverage
Netlify
Protection patterns for Netlify CLI operations including site deletion and environment variables
The netlify check group covers destructive Netlify CLI operations.
Netlify checks
Delete site
| ID | netlify:sites_delete |
| Severity | Critical |
Deleting a Netlify site permanently removes it and all its deployments.
# Triggers
netlify sites:delete
netlify sites:delete --force
netlify sites:delete --site-id abc123
# Does NOT trigger
netlify sites:list
netlify sites:create
netlify deploy
Unset environment variable
| ID | netlify:env_unset |
| Severity | High |
Removing an environment variable can break builds and deployments.
# Triggers
netlify env:unset MY_VAR
netlify env:unset MY_VAR --context production
# Does NOT trigger
netlify env:list
netlify env:set MY_VAR value
netlify env:get MY_VAR
Clone environment variables
| ID | netlify:env_clone |
| Severity | High |
Cloning environment variables overwrites the target site's variables.
# Triggers
netlify env:clone --to site-id
netlify env:clone --from source-site --to target-site
# Does NOT trigger
netlify env:list
Summary table
| ID | Command | Severity |
|---|---|---|
netlify:sites_delete | netlify sites:delete | Critical |
netlify:env_unset | netlify env:unset | High |
netlify:env_clone | netlify env:clone | High |