{"version":"2.1.274","anchor":"git-env-allowlist-changed-config-override-vars-removed-nam","canonical_anchor":"git-env-allowlist-changed-config-override-vars-removed-nam","heading":"Git env allowlist changed: config-override vars removed, namespace\/worktree vars added","tier":"internal","area":"Git Security","scope":null,"heads_up":null,"url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274\/e\/git-env-allowlist-changed-config-override-vars-removed-nam","release_url":"https:\/\/changelogs.core-directive.com\/v\/2.1.274","markdown":"### Git env allowlist changed: config-override vars removed, namespace\/worktree vars added\n\nThe GIT_* environment variables Claude Code sanitizes before running git changed: config-override vars dropped, namespace\/worktree vars added\n\n**Unclear.** It isn't clear why the config-override variables, previously called out for safety reasons, were removed from this list.\n\n**What**\n\nThe set of `GIT_*` environment variables that Claude Code scrubs before running git commands changed:\n\n- Removed: `GIT_CONFIG_COUNT`, `GIT_CONFIG_PARAMETERS`, `GIT_CONFIG_GLOBAL`, `GIT_CONFIG_SYSTEM`, `GIT_CONFIG`\n\n- Added: `GIT_NAMESPACE`, `GIT_IMPLICIT_WORK_TREE`\n\n**Why**\n\nThis changes exactly which environment-based ways of redirecting a git command's behavior Claude Code sanitizes against before running it, dropping the config-override variables from the list and adding namespace and work-tree ones instead.\n\n- Area: Git Security\n- Tier: Under the hood\n- Useful: 2\/5\n- Signal: 1\/5"}