From: D. Ben Knoble <ben.knoble@gmail.com>
Date: Wed, 07 Oct 2026 19:50:43 GMT
Subject: Re: git non-intrusive clone
Message-ID: <CALnO6CA5tY5Ebw5JyA8c-e00PqLcXMAijA5VF6DrPJNDCX=raA@mail.gmail.com>
In-Reply-To: <d6dc70f6-f155-4a5a-b647-ac24b2b1ed37@app.fastmail.com>

On Wed, Oct 7, 2026 at 3:20 PM Luca Di Carlo <luca@dicarlo.email> wrote:
>
> Hey,
> You are right, I've re-read the article that I had in mind, he downloads it as zip before, not as clone.
> `.git` is not cloned.
> Sorry for that.
> Thanks

[we bottom-post here ;)]

No worries! I think in the past Git has said "that's not really part
of our security model", but I don't have any authoritative references.

Still, definitely worth having the conversation, and I'm glad we
figured it out together. I'm still somewhat interested in what we can
do besides "try to tell folks not to blindly trust downloaded files"…
but that's never going to stop being bad advice :)

-- 
D. Ben Knoble