github / github/copilot-cli

Command blocked in autopilot mode

Aberta
#2,258 1 comentário 2 reações 0 responsáveis Ver no GitHub
area:agents
Linguagem predominante
Shell
Estrelas
11.2k
Forks
1.9k
Merge médio
14h 16min
PRs com merge (30d)
6

Descrição

### Describe the bug

I'm running in autopilot and yolo mode to debug Github CI failures. The agent keeps issuing commands to check on progress bug then blocks them. These command blocks should not be there in autopilot yolo mode.

### Affected version

GitHub Copilot CLI 1.0.11.

### Steps to reproduce the behavior

1. Ask copilot to debug some Github CI/CD fail.
2. Sometimes it issues commands that are blocked.

Example:
```
● Now trigger and monitor with shorter check intervals:

● Trigger iOS CI (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && gh workflow run "Release iOS (TestFlight)" && sleep 5 && gh run list -w "Release iOS (TestFlight)" -L 1
└ 8 lines...

✗ Check job progress after 3 min (shell)
│ cd /Users/cdeil/code/stocadro/stocadro-ai && sleep 180 && gh run view --job=$(gh api repos/stocadro/stocadro-ai/actions/runs/23493270159/jobs --jq '.jobs[0].id') 2>&1 | head -25
└ Command blocked: contains dangerous shell expansion patterns (e.g., parameter transformation, indirect expansion, or nested command substitution) that could enable arbitrary code
execution. Please rewrite the command without these expansion patterns.
```

### Expected behavior

In YOLO and autopilot mode no command should be blocked. Certainly such typical shell expansion patterns shouldn't be blocked.

### Additional context

_No response_

Guia de contribuição

Abrir o guia de contribuição

Direção de pesquisa

Start by reproducing the shown gh workflow command in GitHub Copilot CLI 1.0.11 with autopilot and YOLO enabled, then trace the command-safety check that reports dangerous shell expansion patterns. Done means valid commands are not blocked in those modes while unsafe commands remain protected.

Escrita pelo modelo de indexação a partir do texto da issue.

Avaliação

Stack de tecnologia
shell
Domínio
cli, security
Tipo de issue
Bug
Dificuldade
4/5
Tempo estimado
3-5 dias
Status de atividade
Pouca atividade
Clareza
Razoavelmente clara
Facilidade para iniciantes
45/100

Receba novas issues na sua caixa de entrada

Um resumo curto de issues do GitHub para quem está começando.