You'll notice
The shell safety checker now treats sudo like env when scanning for prefixed variable assignments, plus a few more git-reach checks.
The shell-command safety checker, which determines whether a bash command could reach git, now treats sudo the same as env when scanning for prefixed environment-variable assignments. It also adds checks for commands run via a variable or file descriptor and for git-naming text piped into other commands.