$ shellfirm
Protection Coverage

Netlify

Protection patterns for Netlify CLI operations including site deletion and environment variables

The netlify check group covers destructive Netlify CLI operations.

Netlify checks

Delete site

IDnetlify:sites_delete
SeverityCritical

Deleting a Netlify site permanently removes it and all its deployments.

# Triggers
netlify sites:delete
netlify sites:delete --force
netlify sites:delete --site-id abc123

# Does NOT trigger
netlify sites:list
netlify sites:create
netlify deploy

Unset environment variable

IDnetlify:env_unset
SeverityHigh

Removing an environment variable can break builds and deployments.

# Triggers
netlify env:unset MY_VAR
netlify env:unset MY_VAR --context production

# Does NOT trigger
netlify env:list
netlify env:set MY_VAR value
netlify env:get MY_VAR

Clone environment variables

IDnetlify:env_clone
SeverityHigh

Cloning environment variables overwrites the target site's variables.

# Triggers
netlify env:clone --to site-id
netlify env:clone --from source-site --to target-site

# Does NOT trigger
netlify env:list

Summary table

IDCommandSeverity
netlify:sites_deletenetlify sites:deleteCritical
netlify:env_unsetnetlify env:unsetHigh
netlify:env_clonenetlify env:cloneHigh