git

Gets code into the sandbox and records your work there. Nothing leaves: there is no push.

Components

Capabilities

• clone: remote URLs only (https, http, git, ssh or user@host:path), never a local path. Shallow (--depth=1), with a 2-minute limit. Into the sandbox root unless you name a folder.
• status: the changed files in a cloned repository.
• commit: saves your changes in the sandbox under a fixed sandbox identity.

Safety

• Every folder is checked against the sandbox, including where symlinks really lead.
• Clones are made with symlinks turned off, so a repository cannot plant a link that points outside the sandbox.
• No push, so the sandbox can never publish anything.

Why

A shallow clone turns minutes into seconds for large repositories, and most tasks need no history.