What
For certain git operations, Claude Code runs git with a cleaned-up environment. That environment now lets git use only:
- https
- file, where file access is allowed
Plain http is no longer permitted, and a remote address must start with https:// (or file:// where allowed). A plain http:// remote is refused. Credential variables are still blanked as before.
Why
This stops git from fetching over unencrypted connections in this path. If you rely on an http:// remote here, it will now be refused.
Something disagreesSomething we can check disagrees with this entry, or the writer said they could not settle it.
The writer flagged doubt
Which feature runs these git operations is not stated.