> at a minimum ram contents will be plaintext The only thing that's going to remain resident after a push/pull is os level file system cache. There's no daemon

> at a minimum ram contents will be plaintext The only thing that's going to remain resident after a push/pull is os level file system cache. There's no daemon when operating git over ssh. Are container escapes on major hosting services common enough to even worry about? I don't hear much about them. Or are you concerned about AWS/Vultr/Digital Ocean stealing your code? That seems like paranoia. They have world class developers, best in the industry. They don't want your code. This isn't the movie Antitrust.