Credential access
Reads credential helpers, remotes, config, signed keys, and repository-local secret history.
brew / approval gates / rank 33
Distributed revision control system. Version 2.55.0 via Homebrew; verified 2026-06-29.
agent safety
git can read repository history and mutate source-control state used by agents and humans.
Reads credential helpers, remotes, config, signed keys, and repository-local secret history.
Can push commits, tags, branches, and force updates to remote repositories.
Can publish source changes and release tags that downstream systems consume.
Gate pushes, tag creation, credential fill, and remote rewrites.
Allow diff/status/log reads; require approval for pushes, credential-helper reads, and destructive history changes.
install
brew install gitprovider-native install command
overview
Distributed revision control system
history
Git is the distributed version-control system created for Linux kernel development and later generalized into the default source-control substrate for much of software development. Its command-line interface, repository format, protocol family, and ecosystem of hosting services define how many projects exchange code.
Git began in 2005 after the Linux kernel community lost access to the proprietary BitKeeper workflow it had been using. Linus Torvalds wrote the original implementation to support Linux-scale development, emphasizing speed, integrity, distributed operation, and cheap branching.
The design departed from centralized version-control systems by making every clone a full repository with local history and branch operations. That choice made offline work, fork-based development, and patch exchange natural rather than exceptional.
After its Linux origin, Git evolved into a broadly portable tool with a large manual set, porcelain commands for everyday work, and plumbing commands for scripts and higher-level tools. The kernel.org repository remains the canonical upstream source location, while git-scm.com provides the public documentation hub.
Git's adoption accelerated with distributed open source development and the rise of Git hosting services such as GitHub, GitLab, and related forges. The official Git site characterizes the core project as a command-line tool surrounded by hosting services, graphical clients, editor integrations, and other command-line helpers.
By the early 2010s, Git had moved from a Linux-kernel tool into the common denominator for open source collaboration, commercial software teams, CI systems, package ecosystems, and code review platforms. Its repository model also became the foundation for workflows outside source code, including documentation and data-adjacent projects.
Practitioners use Git to initialize or clone repositories, stage and commit changes, branch and merge work, inspect history, exchange commits through remotes, and recover earlier states. Its local-first model makes common commands fast because most history and metadata are on the developer's machine.
Teams layer policy on top of Git through protected branches, pull requests, signed commits, release tags, submodules, worktrees, hooks, and CI triggers. The same executable serves both interactive daily work and automation in release scripts, package recipes, deployment systems, and source archives.
Git is one of the central dependencies of package-manager culture. Formulae, ports, distro source packages, language registries, and build systems routinely fetch from Git repositories, pin commits or tags, generate source archives, and use Git metadata to derive versions.
Its significance also comes from its stability as an interchange format. Even tools that wrap Git, avoid the Git CLI, or store files elsewhere usually need to speak in Git concepts: commits, refs, remotes, branches, tags, diffs, and patches.
approval gates
The local approval-gate seed includes 6 rules for git. Covered entrypoints: git. Severity labels: critical, high, medium. Coverage: partial, reviewed 2026-05-21.
local files
These source-backed paths show where this package keeps local settings or durable credentials. Automic Vault can use them as review targets for secret scanning, migration, and command approval.
Credential-bearing paths to review before unattended agent runs.
~/.git-credentialsexecutables
| Command | Kind | Exposure | Note |
|---|---|---|---|
git | executable | indexed executable | Discovered from the local executable index. |
git-cvsserver | executable | indexed executable | Discovered from the local executable index. |
git-receive-pack | executable | indexed executable | Discovered from the local executable index. |
git-shell | executable | indexed executable | Discovered from the local executable index. |
git-upload-archive | executable | indexed executable | Discovered from the local executable index. |
git-upload-pack | executable | indexed executable | Discovered from the local executable index. |
scalar | executable | indexed executable | Discovered from the local executable index. |
freshness
These signals separate page generation age, package-manager activity, and upstream release comparison. Version lag is warned only when an evidence URL and comparable versions are present.
install metadata
| Package key | brew:git |
|---|---|
| Version | 2.55.0 |
| Package manager | Homebrew |
| Homepage | https://git-scm.com |
| Repository | https://github.com/git/git |
| Last updated | 2026-06-29T20:54:53Z |
| Pulse | updated |
| Bottle | not recorded |
| Service | none declared |
source trail
This page is generated by av-web from the private package SQLite artifact built by scripts/generate-pkg-sqlite.py.
View the package source record on GitHub.