# Multi-word prefixes like git diff aren’t supported right now. The allow list only matches the first command (git), not subcommands. So your only option is: ["git"]