diff --git a/config/_default/security.toml b/config/_default/security.toml
index ab24e26..f31776a 100644
--- a/config/_default/security.toml
+++ b/config/_default/security.toml
@@ -1,7 +1,7 @@
 enableInlineShortcodes = false
 
 [exec]
-allow = ['^asciidoctor$', '^dart-sass-embedded$', '^go$', '^npx$', '^postcss$']
+allow = ['^asciidoctor$', '^dart-sass-embedded$', '^go$', '^npx$', '^postcss$', 'git']
 osEnv = ['(?i)^(PATH|PATHEXT|APPDATA|TMP|TEMP|TERM|GO*)$']
 
 [funcs]