When Claude Code runs git, it builds a restricted, hardened set of environment variables for it. Environment variables are named settings passed to programs. A new sorting step labels toolchain variables by what they point to:
Folders, such as GOROOT, JAVA_HOME and VIRTUAL_ENV.
Files, such as JAVACMD, UV_PYTHON and SOPS_GPG_EXEC.
The hardened environment builder now uses this sorting.
Why
In practice, these variables are now handled according to whether they name a folder or a file when git runs.
How sure we are
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubtThe finding does not say how each label changes the way a variable is treated.
