Git’s filename filtering surprisingly works as you’d expect. To an extent.

File capabilities offer a secure alternative to SUID executables, but can be a little confusing at first.