News for hackers. Stuff that matters.

A comment on Show HN: A Claude Code plugin that catch destructive Git and filesystem commands. Parent comment

Re:Show HN: A Claude Code plugin that catch destructive Git ... by Porygon on Tuesday December 30, 2025 @03:00AM (#46430706)
I do that, too! I use git for version control outside the docker container, and to prevent claude from executing arbitrary code through commit hooks, I attach the docker volume mount in a nested directory of the repository so claude can not touch .git. Are there any other attack vectors that I should watch out for?
[ Parent | on HN ]
Re:Show HN: A Claude Code plugin that catch destructive Git ... by throw-12-16 on Tuesday December 30, 2025 @03:46AM (#46430993)
I never mount .git to the agent container, but sometimes I will initialize the container with its own internal .git so the agent can preserve its git operations and maintain a change log outside of its memory context.
[ Parent | on HN ]
Re:Show HN: A Claude Code plugin that catch destructive Git ... by ivankra on Tuesday December 30, 2025 @03:04AM (#46430724)
Ohh, good point about git hooks as a container escape vector! I probably should add `-v $PWD/.git:$PWD/.git:ro` for that (bind-mount .git as read-only).
[ Parent | on HN ]