podman -- files outside build context may be included via malicious Git repo or tar archive

The Podman developers report:

Building a Dockerfile using an ADD or COPY instruction accessing a malicious Git repository or tar archive could cause files outside the build context directory to be included in the build context or copied into the build.

[source]