Git runs with strict host-key checking and risky protocols disabled, no matter your environment.
What's wrong with this entry?
Git operations Claude Code runs now rewrite inherited environment variables before invoking git: GIT_SSH_COMMAND and GIT_SSH are forced into batch mode with strict host-key checking, and GIT_ALLOW_PROTOCOL is rebuilt as explicit -c protocol.X.allow=never flags. Git also refuses to run when the working directory path cannot be expressed in git's path-separated discovery ceiling.
- Applies to every git invocation built through this helper; there is no setting to opt out.
- The refusal message explains that git's discovery ceiling is a separator-delimited list that cannot express the path.
git's discovery ceiling (a "${l}"-separated list) cannot express
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.236
Git commands run for cloud seeding can no longer reach the network or prompt
Both mention allow protocol
-
v2.1.248
Git runs with a pinned environment and a blocked-flag list
Both mention allow protocol
-
v2.1.248
Control traffic survives a re-authentication instead of being dropped
Both mention protocol