Every matched command must NOT contain fragment — the ban, for the rules stated the other way round ("never --force", "no -k/--insecure").
fragment
--force
-k
--insecure
Same vacuity rule as mustInclude, and for a sharper reason: a ban that matched nothing is the single easiest check to leave green forever.
Every matched command must NOT contain
fragment— the ban, for the rules stated the other way round ("never--force", "no-k/--insecure").Same vacuity rule as mustInclude, and for a sharper reason: a ban that matched nothing is the single easiest check to leave green forever.