From c82aa7879ba64c1dd4a7bb981c237aa60e37503f Mon Sep 17 00:00:00 2001
From: Bohdan Triapitsyn <artmore@protonmail.com>
Date: Mon, 7 Sep 2026 20:37:47 +0300
Subject: [PATCH] fix(git): honor standalone credential-helper permission

Complete the createGit option handling introduced in #3383.
---
 packages/web/server/lib/git/service.js | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/packages/web/server/lib/git/service.js b/packages/web/server/lib/git/service.js
index 1f6b80c3..088155eb 100644
--- a/packages/web/server/lib/git/service.js
+++ b/packages/web/server/lib/git/service.js
@@ -357,9 +357,9 @@ const createGit = async (directory, { allowUnsafeSshCommand = false, allowUnsafe
   const spawnOptions = { windowsHide: true };
   const binary = getGitBinary();
   const hasCustomBinary = typeof binary === 'string' && binary.trim() && binary !== 'git' && binary !== 'git.exe';
-  const unsafe = hasCustomBinary || allowUnsafeSshCommand
+  const unsafe = hasCustomBinary || allowUnsafeSshCommand || allowUnsafeCredentialHelper
     ? {
-      ...(hasCustomBinary && { allowUnsafeCustomBinary: true }),
+        ...(hasCustomBinary && { allowUnsafeCustomBinary: true }),
         ...(allowUnsafeSshCommand && { allowUnsafeSshCommand: true }),
         ...(allowUnsafeCredentialHelper && { allowUnsafeCredentialHelper: true }),
       }