Comment by kunxue

The Codex one is the funniest to me — allowlisting git show by name and never looking at the arguments.