diff --git a/config/_default/hugo.toml b/config/_default/hugo.toml
index 5430c3d..ff052a0 100644
--- a/config/_default/hugo.toml
+++ b/config/_default/hugo.toml
@@ -57,4 +57,4 @@ enableGitInfo = true
     "os.ReadDir" = [".*"]
   [security.exec]
     # Hugo must be allowed to run the asciidoctor binary
-    allow = ["^asciidoctor$"]
+    allow = ['^git$', '^go$', '^npx$', '^postcss$', '^asciidoctor$']