But, as it was pointed out in <https://news.ycombinator.com/item?id=31010522>, you can have nested malicious bare git repos.
But, as it was pointed out in <https://news.ycombinator.com/item?id=31010522>, you can have nested malicious bare git repos.