On Thu, Sep 26, 2019 at 09:02:07AM -0700, Joe Perches wrote: > > the [a-f0-9]{1,40} already excludes "commit". > > No it doesn't as commit starts with c which matches [a-f0-9]{1,40} Whoops! Yes, sorry, you're right. I needed a trailing whitespace in the regex. -- Kees Cook