---
title: Install git-watchdog on Linux | Snap Store
description: Get the latest version of git-watchdog for Linux - Read-only Git remotes
  while selected processes (e.g. AI agents) run
url: https://snapcraft.io/git-watchdog
---

# git-watchdog

[Andris Dobicinaitis (dobicinaitis)](https://snapcraft.io/publisher/dobicinaitis "View all snaps from Andris Dobicinaitis (dobicinaitis)")

* [Andris Dobicinaitis (dobicinaitis)](https://snapcraft.io/publisher/dobicinaitis "View all snaps from Andris Dobicinaitis (dobicinaitis)")
* [Development](https://snapcraft.io/search?categories=development)

latest/stable 0.2.1

Install latest/stable of git-watchdog

---

**Install using the command line**

```
sudo snap install git-watchdog
```

Don't have snapd? [Get set up for snaps](https://snapcraft.io/docs/installing-snapd).

---

### Package name

* git-watchdog

---

### License

* MIT

---

### Last updated

* 23 October 2026 - latest/stable

---

### Source code

* [github.com/dobicinaitis/git-watchdog](https://github.com/dobicinaitis/git-watchdog "https://github.com/dobicinaitis/git-watchdog")

---

### Report a bug

* [github.com/dobicinaitis/git-watchdog/issues](https://github.com/dobicinaitis/git-watchdog/issues "https://github.com/dobicinaitis/git-watchdog/issues")

---

##### Report a Snap Store violation

* [Report this Snap](https://snapcraft.io/git-watchdog#report-snap-modal)

---

* [Description](https://snapcraft.io/git-watchdog#tab-description)
* [Security](https://snapcraft.io/git-watchdog#tab-security)

#### Read-only Git remotes while selected processes (e.g. AI agents) run

AI coding agents run commands with your permissions, including your SSH keys
and Git credentials. A single unattended `git push` can force-push over shared
history, delete a branch or publish unreviewed code, and that is hard to undo
once it reaches the server.

`git-watchdog` removes push access while an agent is running. As long as a
watched process is alive (by default the Claude CLI and Claude Desktop), it
puts the remotes of your local repositories in **read-only mode**:

* **Pushing is blocked**, so `git push` fails instead of reaching the server.
* **Fetching keeps working** through a read-only access token, so the agent doesn't need your SSH key to pull.

When the process exits, the original remotes are restored exactly as they
were. It guards against accidental pushes, not a determined attacker; see
<https://github.com/dobicinaitis/git-watchdog#security-notes>

---

## Install git-watchdog on your Linux distribution

Choose your Linux distribution to get detailed installation instructions. If yours is not shown, get more details on the [installing snapd documentation](https://snapcraft.io/docs/installing-snapd).

[### Arch Linux](https://snapcraft.io/install/git-watchdog/arch)

[### CentOS](https://snapcraft.io/install/git-watchdog/centos)

[### Debian](https://snapcraft.io/install/git-watchdog/debian)

[### elementary OS](https://snapcraft.io/install/git-watchdog/elementary)

[### Fedora](https://snapcraft.io/install/git-watchdog/fedora)

[### KDE Neon](https://snapcraft.io/install/git-watchdog/kde-neon)

[### Kubuntu](https://snapcraft.io/install/git-watchdog/kubuntu)

[### Manjaro](https://snapcraft.io/install/git-watchdog/manjaro)

[### Pop!\_OS](https://snapcraft.io/install/git-watchdog/pop)

[### openSUSE](https://snapcraft.io/install/git-watchdog/opensuse)

[### Red Hat Enterprise Linux](https://snapcraft.io/install/git-watchdog/rhel)

[### Ubuntu](https://snapcraft.io/install/git-watchdog/ubuntu)