Tor browser for accessing the website. For commits a git+SSH config using Tor's socks proxy port will fail closed. For other tools/plugins that you can't be

Tor browser for accessing the website. For commits a git+SSH config using Tor's socks proxy port will fail closed. For other tools/plugins that you can't be certain about you would have to run things in a VM that prevents non-Tor connections - e.g. this is how Qubes/Whonix does things. Replace Tor with VPN as desired.