Using Bubblewrap is pretty good. However, I moved to using Apple Containers with one local file directory mounted; When the container is not running, I do git operations outside the container. This is simple, and although not as convenient as running naked with no isolation, it is light weight and easy.