.gitconfig file has universal read perms - should be restricted to current user

I noticed that the .gitconfig file is set to 644 permissions
-rw-r--r-- 1 username username 355 Jun 7 11:52 .gitconfig

If I had any actual passwords in the file, they would be readable by anyone - should it not be set to 600 by default?

Start by locating the code path that creates or updates the .gitconfig file and inspect how its permissions are set. Confirm the change keeps the file readable only by the current user, then verify the resulting mode is 600 without exposing existing configuration behavior.

Written by the indexing model from the issue text.