iceweasel-oai 3b45c29062 Stop treating Git commands as inherently safe (#39524) ...

## Why

Repository configuration can cause even read-only Git commands to execute
helpers, so Git command arguments alone are not enough to establish trust.

## What changed

- Remove Git commands from the known-safe command classification on Unix and
  Windows, including commands nested in supported shells.
- Under the `unless-trusted` approval policy, require approval for commands such
  as `git status` unless an explicit execution policy rule allows them.

## Testing

- Cover direct, shell-wrapped, absolute-path, and PowerShell Git commands.
- Verify `git status` approval behavior with and without an explicit allow rule.

GitOrigin-RevId: dd04e0ddca0c56ba64ae64abe6e658bae7bf5a4d

2026-08-19 18:01:14 +00:00

..

src

Stop treating Git commands as inherently safe (#39524)

2026-08-19 18:01:14 +00:00

BUILD.bazel

Add a fail-closed Tree-sitter PowerShell lowerer (#39213)

2026-08-18 14:59:43 +00:00

Cargo.toml

Move shell snapshot tests into shell-command (#39480)

2026-08-19 12:56:08 +00:00