Git safe.directory Can Turn Provenance into UNKNOWN
A production checkout owned by another identity can be readable on disk while Git refuses to trust it.
permissions
Root-Owned Runtime Files and Non-Root Containers Need an Explicit Contract
Dropping container privileges is only safe when mounts, ownership and startup scripts are designed for the new identity.
The Execute Bit on a Directory Is Really a Path Permission
A protected parent directory can block a perfectly readable child file because directory execute controls traversal.
The TLS Key Existed, but OpenBao Still Could Not Read It
A file can have the right contents and still be unusable when directory traversal or group permissions are wrong.
A One-Line COPY Permission Bug Can Make an Image Non-Reproducible
A configuration file copied with the wrong mode can behave differently depending on the build context and base image defaults.