Review repository trust
Some repositories contain Git settings or hooks that run programs on your computer when Git works in them. Before that can happen, GitTree shows Trust this repository? with exactly what it found, and lets you trust it or open it in Restricted mode.
Works in GitTree Free: every local Git feature, once you are signed in.
On this page
Before you start
- You are opening a repository, often one you cloned from someone else.
Where to find it
- The Trust this repository? dialog, when a repository has such settings or hooks.
- A restricted badge on the tab, and Review Trust… in the bar of a restricted repository.
| Action | macOS | Windows and Linux |
|---|---|---|
| Open Repository… | ⌘O | Ctrl+O |
Steps
Read what was found
The dialog lists each finding: the Setting or Hook, its Value, where it is Defined in, and what it does, such as Runs a program or Rewrites remote URLs. Nothing has run yet.
Decide
Trust and Open lets Git run them as it normally would. Open in Restricted Mode runs nothing the repository configures and turns network operations off. Cancel does not open it.
Change your mind later
In a restricted repository, choose Review Trust… to see the findings again and trust it.
Expected result
The repository is open with the level of trust you chose, shown on its tab.
What GitTree looks for
- Settings that start a program during ordinary commands such as status or diff.
- Content filters, diff and merge drivers.
- Active hooks, and settings that move hooks or the working tree elsewhere.
- Remote URL rewrites, included settings files and shell aliases.
If something goes wrong
Some actions are unavailable in a repository
It may be in restricted mode: network operations are off and some working-tree actions too. Choose Review Trust… if you trust it.
“The repository’s settings or hooks changed while this dialog was open.”
Something changed them meanwhile. Review the current findings shown before deciding.
Questions
Is this the same as Git’s “dubious ownership” warning?
No. That warning is about a folder owned by another user; GitTree offers Trust This Folder… for it when you open the repository. Repository trust is about what the repository’s own settings and hooks would run.