{"version":"2.1.312","anchor":"permission-suggestion-helper-for-digest-pinned-at-sha256-rul","canonical_anchor":"permission-suggestion-helper-for-digest-pinned-at-sha256-rul","heading":"Permission suggestions for rules pinned to an exact @sha256 digest","tier":"notice","area":"Permissions","scope":"both","heads_up":false,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.312\/e\/permission-suggestion-helper-for-digest-pinned-at-sha256-rul","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.312","markdown":"### Permission suggestions for rules pinned to an exact @sha256 digest\n\nClaude Code can now recognise permission rules ending in an @sha256 digest or \":*\" and suggest one matching allow rule saved to your user settings\n\n**Unclear.** It is not clear where these suggestions are shown, or whether you will see them yet.\n\n**What**\n\nA permission rule tells Claude Code what it may do without asking you first. Claude Code can now recognise rule text in two forms:\n\n- Text ending in `@sha256:` followed by a 64-character digest. A digest is a fingerprint that identifies one exact version of something.\n\n- Text ending in `:*`.\n\nFrom either form it can build one suggested allow rule with that same text, saved to your user settings.\n\n**Why**\n\nThis may lead to a permission prompt that offers to allow one exact version of a container image. A container image is a packaged software environment.\n\n- Area: Permissions\n- Names: `@sha256`\n- Tier: You'll notice\n- Useful: 2\/5\n- Signal: 2\/5\n- Scope: both\n- Heads-up: no"}