safegit

func Command ¶

func Command(ctx context.Context, args ...string) *exec.Cmd

Command builds an *exec.Cmd for git that is hardened against malicious repo-local configuration. It:

• sets GIT_CONFIG_NOSYSTEM=1 to ignore /etc/gitconfig
• overrides dangerous config keys via -c flags
• inherits a minimal environment (PATH only)

The returned Cmd has Dir unset; callers should set cmd.Dir or pass -C as part of args if needed.