claude-code - 💡(How to fix) Fix Built-in /security-review fails in jj-only repos (git denied) [1 comments, 2 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#46361Fetched 2026-04-11 06:22:19
View on GitHub
Comments
1
Participants
2
Timeline
4
Reactions
0
Author
Timeline (top)
labeled ×3commented ×1
RAW_BUFFERClick to expand / collapse

The built-in /security-review uses git status internally. In repos with Bash(git *) in permissions.deny (jj-only environments), it fails. Request: fall back to jj status/jj diff when git is unavailable, or respect includeGitInstructions: false.

extent analysis

TL;DR

Modify the /security-review to fall back to jj status or jj diff when git is unavailable due to permissions restrictions.

Guidance

  • Investigate the permissions.deny configuration in jj-only environments to understand the specific restrictions on git commands.
  • Consider adding a fallback mechanism to the /security-review implementation to use jj status or jj diff when git status is not allowed.
  • Review the includeGitInstructions flag to determine if it can be used to disable git commands and use jj commands instead.
  • Test the modified /security-review with different permissions.deny configurations to ensure it works as expected.

Example

No code snippet is provided as the issue does not contain sufficient information about the implementation details.

Notes

The solution may require changes to the /security-review implementation and the permissions.deny configuration. The exact changes will depend on the specific requirements and constraints of the jj-only environments.

Recommendation

Apply workaround: Modify the /security-review to use jj status or jj diff when git is unavailable, as this approach allows for a flexible fallback mechanism that respects the permissions.deny restrictions.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING