Yeah we generally don’t give those permissions to agent based coding tools.

Typically running something like git would be an opt in permission.