github / github/copilot-cli

Permanently allowed URLs (and other permissions) are not persisted across sessions

未关闭
#3,253 0 条评论 1 个 reaction 已指派 0 人 在 GitHub 查看
area:configuration area:permissions
主要语言
Shell
星标
11.2k
派生
1.9k
平均合并
14 小时 16 分钟
30 天内合并 PR
6

描述

### Describe the bug

URL permissions marked as "permanent" (e.g., https://docs.github.com) do not persist across sessions.

### Affected version

GitHub Copilot CLI 1.0.45.

### Steps to reproduce the behavior

Steps to reproduce:

1. In a session, when prompted for URL access, choose "Allow permanently"
2. Start a new session in the same directory
3. The same URL permission is requested again

Root cause observed:
- The permanent choice writes to settings.json → allowedUrls, but permissions-config.json (which appears to be checked at runtime) has no corresponding web_fetch/URL entry. This split causes the permission to be ignored on next session start.

Files involved:
~/.copilot/settings.json (has allowedUrls) vs ~/.copilot/permissions-config.json (has tool_approvals — no URL entry)

### Expected behavior

When a user selects "Allow permanently" for a URL or tool permission, that permission should be respected in all future sessions without prompting again.

### Additional context

_No response_

贡献指南

打开贡献指南

调研方向

Start by tracing how settings.json's allowedUrls and permissions-config.json's tool_approvals are written and loaded between sessions. Reproduce the permanent URL approval, then verify that the corresponding web_fetch/URL permission is persisted and no longer requested in a new session.

由索引模型根据 Issue 内容生成。

评估

技术栈
shell
领域
cli, security
Issue 类型
缺陷
难度
3/5
预计耗时
1-2 天
活跃度
冷清
描述清晰度
基本清楚
新手友好度
55/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。