If and only if this program can adapt to Capsicum.
While Capsicum is difficult to apply later on, it provides great protection. The most important benefit it brings is, along with pledge(2) and unveil(2), it can spot unwanted system access (unintentional or malcious) during testing.
The reason this codebase pass string paths around rather than file descriptor (
*File) is go-git v5 (and probably system git) only supports string paths. As Capsicum requires program to use fd, it's not possible to apply in this state.I'll add FreeBSD support once,
.gitresolutionRelated: https://tangled.org/pocka.jp/legit/issues/19