AIQB
TutorialsOrdinary

Allowlisting git for Your Agent Also Allowlists diff.external and core.fsmonitor

Source: DEV Community·

Summary

HiddenLayer showed a forged git command reading .env past an approved git prefix. The git config keys that run programs, a repro, tighter rules, an audit.
CategoryAI Tutorials & Practice
TierOrdinary
Published
Indexed by AIQB
SourceDEV Community
AIQB record IDintel-9cd3d4783f1aedc46eceac8d
Read original source ↗More Tutorials

Related stories

Matched by category, entity tags and source

TutorialsOrdinary
Three weeks of watching MCP advisories appear and disappear
Three weeks ago I published a single-night scan of the top 500 MCP servers. Then I left the scanner...
Source: DEV Community
TutorialsOrdinary
I tested ChatGPT's PDF Content Credentials: what survives a re-save, a print and an edit
Ten ChatGPT-generated PDFs carried a C2PA manifest signed by OpenAI. I re-saved, re-rendered, rasterised and edited them to see what is left. Code included.
Source: DEV Community · OpenAI / ChatGPT
TutorialsOrdinary
I tested whether eBPF helps diagnose slow AI agents. I wrote my predictions first and got many wrong.
A slow AI agent run is a chain of network calls: the model, tools, a database, outside APIs. An...
Source: DEV Community
TutorialsOrdinary
AI Visibility Is Real, but It Is Not a Standalone Performance Metric
AI visibility is measurable, but a growing body of research suggests that many dashboards overstate...
Source: DEV Community
TutorialsOrdinary
Why Tesseract Fails on Cursive Handwriting (And How We Built a Two-Tier Vision Pipeline in Node.js)
When building Holder—a personal information vault and second brain for screenshots, links, and...
Source: DEV Community
TutorialsOrdinary
Criando um agente de IA 24/7 para aplicações .NET
Um agente de plantão em .NET 10 com o gpt-5.4-mini no Microsoft Foundry, com ferramentas, aprovação humana, orçamento de tokens e o que fazer quando a cota do Foundry estoura.
Source: DEV Community · GPT
TutorialsOrdinary
284B on 64GB RAM: We Read the Small Print Before Downloading 56 GiB
Everyone who has bought a car knows how to read a fuel-economy sticker. The number is real. It was...
Source: DEV Community
TutorialsOrdinary
One Site’s Google AI Opt-Out Test Estimated 23% of Search Clicks Came From AI Features
Google does not provide publishers with a separate click total for AI Overviews or AI Mode. That...
Source: DEV Community
TutorialsOrdinary
Reasoning models think in silence. Our job queue read silence as death.
One morning, our daily automated code review flagged a refactor we had just pushed. The finding fit...
Source: DEV Community
TutorialsOrdinary
I built an AI field guide that works with the internet off, live on stream
This is a submission for the Hacktoberfest 2026 DEV Challenge, Week 3: Slow and Steady. ...
Source: DEV Community