[mtndew4brkfst]

It has once even force pushed to github, which doesn't allow branch protection for private personal projects.

This is only restricted for *fully free* accounts, but this feature only requires a minimum of a paid Pro account. That starts around $4 USD/month, which sounds worth it to prevent lost work from a runaway tool.

[jeswin]

I was on one till recently, maybe I still am. But does it work for orgs? I put some projects under orgs when they become more than a few projects.

[namibj]

That's a fee for not running a local git proxy with permissions enforcement that holds onto the GitHub credentials in place of Claude.

[mikaraento]

Do you know of a good ready-made implementation of such a proxy? I’ve been looking for one.

GitHub is also a worry in terms of exfiltration. You can’t block pushes to public repos unless you are using GitHub Enterprise Managed Users afaict.

[verdverm]

Or putting the code and .git in a sandbox without the credentials