Code Execution & Workspace Tool

The Git Push Tool

Push a branch to the remote so an agent’s committed work becomes available for review and CI — governed by branch-protection policy so it can’t push where it shouldn’t.

Explore VDF AI Agents
SandboxedRuns in an isolated workspace
GovernedEvery action logged
AssignableTo any engineering agent
100%On-premise capable
The Execution Gap

A suggestion isn’t a shipped change

An agent that can only propose code still leaves all the work to a human. To actually deliver, it needs a real, governed workspace where it can run code, edit files, test, and use Git — safely, and without touching anything you didn’t allow.

01

Read-only agents

Suggestions still require a human to run, test, and commit everything.

02

Unsafe execution

Running agent-generated code on real infrastructure is a security risk.

03

No verification

Without tests and builds, an agent can’t know its change works.

04

Ungoverned Git

Direct repo access with no policy or audit is a non-starter in the enterprise.

How the Tool Works

Git Push, without the risk

Capability

What it does

Publish a branch to the remote, under policy.

it pushes a branch and its commits to the configured remote.

Tool
Git Push

Assignable to any agent

PushPublishProtectedLogged

How it works

Predictable, inspectable behavior

Designed to be reliable.

pushes respect branch-protection policy and are logged, so an agent can publish feature work for review but cannot bypass the controls on protected branches.

Governed
Policy + Audit

Every call logged

ScopedLoggedGovernedOn-prem

Governance

Private, governed, on-premise

Runs inside your perimeter.

Execution runs in an isolated, on-premise sandbox scoped per tenant with full command and file audit logging, so an agent can do real work on your code without unsafe access or anything leaving your perimeter.

100%
On-Prem

Per-tenant, logged

On-premRBACAudit logSovereign
Inputs

Parameters

The git_push tool accepts these inputs when an agent calls it. Required inputs are flagged.

Name Type Required Description
branch string Optional Branch to push; defaults to the current branch.
remote string
default: origin
Optional Remote to push to.
path string
default: .
Optional Repository directory.
Where it pays back

Where Git Push pays back

Open for review

Publish a feature branch so a PR can be raised.

Trigger CI

Push to kick off pipelines on the branch.

Collaboration

Share an agent’s branch with the team.

Safe delivery

Deliver work without touching protected branches.

How VDF AI connects it

Assigned to agents, orchestrated as networks

On VDF AI, an industry’s use cases map to agents, and you assign tools like this one to those agents. Compose multiple agents into a governed, on-premise network.

ROI Snapshot

What changes after you assign it

Faster
From suggestion to shipped
Verified
Changes tested before merge
Traceable
Every command audited
100%
Code never leaves your perimeter
FAQ

Questions about the Git Push tool

What is the Git Push tool?

It pushes a branch and its commits to the configured remote. Assigned to a VDF AI agent, it runs under role-based policy with full audit logging so the capability is safe to use in production.

Can it push to main?

Only if policy allows; branch protection is respected, so protected branches stay controlled.

Is the push logged?

Yes. Every push is recorded in the audit trail.

Does it run on-premise?

Yes. Like every VDF AI tool, it can run on-premise or in your sovereign cloud, scoped per user and audit-logged, so your data never leaves your perimeter.

How do agents use it?

You assign the tool to an agent under a role-based policy; the agent calls it as one step in a task, and several agents and tools can be orchestrated together as a governed VDF AI Network.

Put Git Push to work

See the Git Push tool assigned to an agent and orchestrated in a governed, on-premise network.