Allowlisting git for Your Agent Also Allowlists diff.external and core.fsmonitor

HiddenLayer showed a forged git command reading .env past an approved git prefix. The git config keys that run programs, a repro, tighter rules, an audit.

Read Original

Related