SQL Server connection string the statements run as. Example: Server=localhost;Database=MyDb;Integrated Security=true;TrustServerCertificate=true Secret.
LOGCARVERGUARD_READ_ONLY
No
Set to true to allow queries only (SELECT without INTO; remote sources such as OPENQUERY are blocked). Leave unset for the default guard rules.
LOGCARVERGUARD_AUDIT_DB_PATH
No
Path of the audit log SQLite file. Defaults to LogCarverGuard/audit.db under the local application data folder.
LOGCARVERGUARD_TRUNCATE_ALLOWLIST
No
Comma-separated schema.table entries where TRUNCATE TABLE is allowed. Empty means all TRUNCATE is blocked.
LOGCARVERGUARD_EXEC_WHITELIST
No
Comma-separated schema.procedure entries that may be run with EXEC. Empty means all EXEC is blocked.
LOGCARVERGUARD_ALTER_DROP_COLUMN_ALLOWLIST
No
Comma-separated schema.table entries where ALTER TABLE ... DROP COLUMN is allowed. Empty means it is blocked.
