No approval required for any tool execution in docker sandboxes

Describe the bug

In docker sandboxes, CLI does not ask me approval for any tool executions:

• create, edit or delete a file
• call curl GET or POST by bash
• create instant python script and run it
• call dotnet command for compiling

Even though /yolo show says Tool, path, and URL requests require individual approval., I have never asked approval for tool executions.

If I ran CLI on Windows outside of docker sandboxes, approvals requested correctly. CLI seems to be affected by the environment but it is not described in reference document. IMO, yolo off should work regardless of the environment.

Affected version

1.0.83

Steps to reproduce the behavior

1. Install docker sandboxes (winget Docker.sbx) and launch copilot (sbx run copilot)
2. /yolo off and confirm by /yolo show
3. Ask to run any of operations above like "I want to check yolo off behavior. Try to create and delete a file, generate and run python script, and access external URL."

Expected behavior

CLI asks me approval for the tool executions.

Additional context

Environment

• GitHub Copilot CLI in Docker Sandboxes v0.39.0 on Windows 11
• permissions-config.json not exists
• permissions.disableBypassPermissionsMode is disable in settings.json

Related link
https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-command-reference#restricting-the---allow-all-options

Reproduire avec Docker Sandboxes v0.39.0 sur Windows 11 en utilisant sbx run copilot ; comparer /yolo off et /yolo show avec la CLI exécutée directement. Ensuite, suivre la gestion des permissions avec permissions-config.json et settings.json, et confirmer le fix lorsque chaque opération listée demande une approbation dans le sandbox.