[namibj]

That's a fee for not running a local git proxy with permissions enforcement that holds onto the GitHub credentials in place of Claude.

[mikaraento]

Do you know of a good ready-made implementation of such a proxy? I’ve been looking for one.

GitHub is also a worry in terms of exfiltration. You can’t block pushes to public repos unless you are using GitHub Enterprise Managed Users afaict.

[verdverm]

Or putting the code and .git in a sandbox without the credentials