Git Operations

Agent clones a private repo into the sandbox by embedding a personal access token directly in the remote URL (https://x:TOKEN@github.com/...).

Authenticate git with a least-privilege, short-lived token provided via credential helper/env, not embedded in the remote URL (URLs land in .git/config, logs, and reflogs). Scope the token to the single repo and to read-only when only cloning. [REQUIRES-VERIFICATION] for the SDK git auth mechanism.

Agent makes generated edits and commits them directly onto the repo's main branch inside the sandbox, then pushes.

Make agent edits on a dedicated feature branch, never directly on main/default; push the branch and open a PR for human review. Generated commits to a protected branch bypass review and can break collaborators. Verify the current branch before committing.

Agent commits with an empty/placeholder author and a meaningless message ('changes'), obscuring that the change was machine-generated.

Set a clear bot author identity and a descriptive commit message that marks the change as agent-generated and references the originating task, so reviewers can audit provenance. Do not impersonate a human author. Make machine authorship traceable.