# agent: Sandboxing polish \(\#60173\) · gitcafe/zed

[View on GitCafe](https://git.cafe/gitcafe/zed/commit/3648fe6f19644fa4fcbd4f1db3e5888efb8269c1)

Repository: [gitcafe/zed](https://git.cafe/gitcafe/zed)

Visibility: public

Requested revision: 3648fe6f19644fa4fcbd4f1db3e5888efb8269c1

Requested commit: 3648fe6f19644fa4fcbd4f1db3e5888efb8269c1

Commit: 3648fe6f19644fa4fcbd4f1db3e5888efb8269c1

Tree: 5c16aa60a8df317b069739461cd423a1ddefc88a

Author: Cameron Mcloughlin

Committer: GitHub

## Message

```
agent: Sandboxing polish (#60173)

Removes git sandbox feature

The reason is essentially:
- write access to a `.git` dir can be trivially escalated to unsandboxed
access
- therefore, it is misleading to offer git access separate from
unsandboxed access
- instead, we encourage the model to use `--no-optional-locks` to avoid
needing write access to `git status`, etc.


Adds sandboxing to fetch tool
 


---

Release Notes:

- N/A or Added/Fixed/Improved ...

---------

Co-authored-by: zed-zippy[bot] <234243425+zed-zippy[bot]@users.noreply.github.com>
```

## Parents

- [c35650a88476587c9272eede79a2960d143b5a59](https://git.cafe/gitcafe/zed/commit/c35650a88476587c9272eede79a2960d143b5a59?format=markdown)

[Source at this commit](https://git.cafe/gitcafe/zed/tree/3648fe6f19644fa4fcbd4f1db3e5888efb8269c1?format=markdown)