Commit graph

2 commits

Author SHA1 Message Date
7aaee37ac8 Fix git-wrapper: preserve argv[0] for multi-call dispatch, tighten security
- exec -a "$0" so git.real sees the correct argv[0] (e.g. git-upload-pack)
  and dispatches correctly; without this SSH clone was broken
- Check only $1 for "merge-file" instead of scanning all args, preventing
  accidental ifcmerge invocation from commit messages or other arg positions
- Use absolute path /usr/local/bin/ifcmerge to prevent PATH hijacking

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-05-18 22:17:55 +01:00
b23b210f76 Document git-wrapper for ifcmerge: Forgejo uses git merge-file not merge-tree 2026-05-17 23:37:14 +01:00