zed/nix
Cameron Mcloughlin 3648fe6f19
agent: Sandboxing polish (#60173)
Removes git sandbox feature

The reason is essentially:
- write access to a `.git` dir can be trivially escalated to unsandboxed
access
- therefore, it is misleading to offer git access separate from
unsandboxed access
- instead, we encourage the model to use `--no-optional-locks` to avoid
needing write access to `git status`, etc.


Adds sandboxing to fetch tool
 


---

Release Notes:

- N/A or Added/Fixed/Improved ...

---------

Co-authored-by: zed-zippy[bot] <234243425+zed-zippy[bot]@users.noreply.github.com>
2026-07-01 14:55:30 +00:00
..
dev agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
livekit-libwebrtc nix: Fix build on x86_64-linux (#52917) 2026-04-01 20:50:04 +02:00
modules agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
tests agent: Sandboxing polish (#60173) 2026-07-01 14:55:30 +00:00
build.nix agent: More sandboxing changes (#60111) 2026-06-30 11:10:04 +00:00
toolchain.nix zed: Read ZED_COMMIT_SHA from env var when building (#51115) 2026-03-09 17:02:09 +01:00