Harden for the reader: three red flags an AppSec engineer hits on `git clone`

There's a gap between software that works and software that survives being read by a security...