GeezerVison

Problem

This was brought to our attention via HackerOne.

A repository archive could include a .git directory. During bind workspace setup, src extracted this directory and then ran Git commands on the host. Malicious Git hooks or repository configuration could therefore run code on the host.

Solution

Reject archive entries that resolve inside the root .git directory. The check also handles normalized paths and case-insensitive filesystems.

Verification Evidence

• go test ./internal/batches/workspace
• go test ./internal/batches/...
• Added tests for malicious hooks, repository configuration, normalized paths, and case variants.