Files
3446398e33 fix: validate denylisted git args on every token (#784)
Short-option clusters such as -Sm were treated as consuming the next
argument, which let --pathspec-from-file reach git and leak file
contents into workflow logs.

Co-authored-by: Cursor <cursoragent@cursor.com>
2026-08-19 14:47:41 +00:00
..