AI SECURITYLABS

Security for Gemini Development: Before your first session

Part 8 of 16

Before your first session

  • Update: Gemini CLI 0.39.1 or later, and run-gemini-cli 0.1.22 or later, pinned by SHA.
  • Use your organisation’s licence: Code Assist admin controls “cannot be overridden by users locally”.
  • Keep folder trust on: an untrusted folder loads only four authentication variables from its .env and starts no MCP servers (Gemini CLI docs).
  • On Windows, have an administrator lock C:\ProgramData\gemini-cli before rollout.