TLDR Tech / IT
Protecting .git from malicious agents
AI agents with write access to .git directories can execute arbitrary code via git configuration, such as diff drivers or smudge filters. Developers can mitigate this risk by mounting the .git directory as read-only within containers, preventing agents from modifying host-side git configurations while maintaining repository access.
Read the full story