The shell-command safety checker, which determines whether a bash command could reach git, now treats sudo the same as env when scanning for prefixed environment-variable assignments. It also adds checks for commands run via a variable or file descriptor and for git-naming text piped into other commands.
Bash safety guard adds sudo-prefix handling
The shell safety checker now treats sudo like env when scanning for prefixed variable assignments, plus a few more git-reach checks.
You'll noticeTier: how much it should matter to you
1Useful: my rating, 1 to 5
1Signal: worth watching, 1 to 5
PermissionsArea: what it touches
ImprovementsKind: in v2.1.259,
ImprovementsSection of the release