Wow, there's something really wrong with this guy. This goes beyond "criticism" but I admit I don't know where the line falls before you consider a death threat to be worth taking action on.
> Mr. Dernbach, don’t play Russian roulette with H’s life
Verses posting images of an arsenal, writing they need to buy guns for the upcoming election, and also:
> The time is right for a presidential assassination or two. First Joe then Kamala!!!
One is clearly threatening murder towards public officials and showing themselves taking steps to enact their plan. The other is a concerned citizen exercising their first amendment right. I have to believe the people saying these are the same are bots, because the alternative is just so pathetic.
My point is about civil disobedience, not disobedience generally. The point of civil disobedience is to bring attention to unjust laws by forcing people to deal with the fact they they are imprisoning people for doing something that doesn't actually deserve prison.
Expecting to not end up in prison for engaging in civil disobedience misses the point. It's like when people go on a "hunger strike" by not eating solid foods. The point is self-sacrifice to build something better for others.
https://www.kqed.org/arts/11557246/san-francisco-hunger-stri...
If that's not what you're into -- and it's not something I'm into -- then I would suggest other forms of disobedience. Freedoms are rarely granted by asking for them.
Use a container or VM, place the code you're working on in the container or VM and run the agent there.
Between the risk of the agent doing things like what happened here, and the risk of working on a malicious repository causing your device to be compromised, it seems like a bad plan to give them access to any more than necessary.
Of course this still risks losing things like the code you're working on, but decent git practices help to mitigate that risk.
I'm also surprised at the move to just using shell commands. I'd think an equally general purpose tool with a more explicit API could make checking permissions on calls a lot more sensible.