Re: git non-intrusive clone
- From
D. Ben Knoble <ben.knoble@gmail.com>
- Date
- Oct 7, 2026, 19:50 UTC
- Message-ID
- <CALnO6CA5tY5Ebw5JyA8c-e00PqLcXMAijA5VF6DrPJNDCX=raA@mail.gmail.com>
- In-Reply-To
- <d6dc70f6-f155-4a5a-b647-ac24b2b1ed37@app.fastmail.com>
On Wed, Oct 7, 2026 at 3:20 PM Luca Di Carlo <luca@dicarlo.email> wrote:
Show 6 quoted lines
> > Hey, > You are right, I've re-read the article that I had in mind, he downloads it as zip before, not as clone. > `.git` is not cloned. > Sorry for that. > Thanks
[we bottom-post here ;)]
No worries! I think in the past Git has said "that's not really part of our security model", but I don't have any authoritative references.
Still, definitely worth having the conversation, and I'm glad we figured it out together. I'm still somewhat interested in what we can do besides "try to tell folks not to blindly trust downloaded files"… but that's never going to stop being bad advice :)
-- D. Ben Knoble