Function commandHasAnyGit

src/tools/BashTool/readOnlyValidation.ts:1760–1764

* Checks if a compound command contains any git command. * * @param command The full command string to check * @returns true if any subcommand is a git command

(command: string)

 * @returns true if any subcommand is a git command
 */
function commandHasAnyGit(command: string): boolean {
  return splitCommand_DEPRECATED(command).some(subcmd =>
    isNormalizedGitCommand(subcmd.trim()),
  )
}

/**
 * Git-internal path patterns that can be exploited for sandbox escape.