We're trying out Bitbucket for our version control and release process and identified sourcetree has good GUI for git.

As a process, we've requested our security team to examine the tool. The feedback given by the team was sourcetree is 100% malicious.

Please provide your recommendation on the feedback of our security team