Gitfence blogRepository access control for people and AI agents. https://gitfence.dev/blog/2026-10-09T12:00:00Z Can You Restrict Access to Folders in a GitHub Repo?https://gitfence.dev/blog/restrict-access-to-folders-in-github-repository/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamNo, GitHub has no folder-level read permissions. Here's why, what GitHub does offer (CODEOWNERS, push rulesets), and the options that hide folders. CODEOWNERS Is Not Access Control (What It Actually Does)https://gitfence.dev/blog/codeowners-is-not-access-control/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamGitHub CODEOWNERS requests reviews and can require approvals, but it doesn't stop anyone reading or cloning code. What it does, what it doesn't, and fixes. Git Sparse Checkout vs Real Access Controlhttps://gitfence.dev/blog/git-sparse-checkout-vs-access-control/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamGit sparse checkout hides files from your working tree, not your clone. What it does, how to bypass it in one command, and what restricts access. How to Give Contractors Access to Part of a GitHub Repohttps://gitfence.dev/blog/give-contractors-access-to-part-of-github-repo/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamGitHub grants access per repository, not per folder. Here are the real options for giving a contractor part of a repo, with commands and tradeoffs. Least-Privilege Repo Access for Claude Code, Codex, Cursorhttps://gitfence.dev/blog/least-privilege-repo-access-ai-coding-agents/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamHow to give Claude Code, Codex and Cursor least-privilege repository access with permission rules, sandboxes, scoped tokens and filtered clones. Monorepo Permissions for Per-Team Access in One Repohttps://gitfence.dev/blog/monorepo-permissions-per-team-access/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamGit and GitHub have no per-folder read permissions, so how do teams restrict access inside a monorepo? Options, tradeoffs and configs for per-team access. NDAs for Developers Before Code Access (Practical Guide)https://gitfence.dev/blog/nda-for-developers-before-code-access/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamWhen and how to get an NDA signed before a developer or contractor sees your code, what to cover for AI tools, and how to gate access on it. Onboarding New Developers Without Full Codebase Accesshttps://gitfence.dev/blog/onboard-new-developers-without-full-codebase-access/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamHow to onboard new hires with least-privilege codebase access so they ship in week one without a full clone. Options, tradeoffs and a day-one checklist. Protecting Source Code from AI Agents and Contractorshttps://gitfence.dev/blog/protect-source-code-from-ai-coding-agents/2026-10-09T12:00:00Z2026-10-09T12:00:00ZGitfence teamHow to protect source code when AI coding agents and contractors work in your repo, what ignore files and NDAs really do, and what limits access.