You'll notice
Git subprocesses now fully block SSH when GIT_ALLOW_PROTOCOL is set to 'none', closing a bypass
What
When Claude Code's sandbox or BYOC (bring-your-own-cloud) git helper sets GIT_ALLOW_PROTOCOL to "none" to disable git network protocols, it now also adds extra git arguments and forces GIT_SSH_COMMAND to "false".
Why
Previously, setting GIT_ALLOW_PROTOCOL to "none" didn't fully stop git from still reaching out over SSH, leaving an apparent bypass of the protocol restriction. This closes that gap so disabling git protocols actually blocks SSH access too.