Approved proposal: #3831
Pattern: permission_gap
Evidence: Bug-hunter worker mode requires cloning the repository to
analyze source code, but git clone/config/fetch/checkout/reset
permissions were missing from the bash permission list. Workers
were unable to clone the repo and therefore could not perform
any code analysis.
Fix: Add git clone*, git config*, git fetch*, git checkout*,
git reset*, mkdir *, and rm -rf * permissions to enable workers
to clone and clean up their isolated working directories.
ISSUES CLOSED: #3831