github / github/copilot-cli

Prompt mode `-p` doesn't respect allowed directories

Abierto
#668 0 comentarios 0 reacciones 0 asignados Ver en GitHub
area:non-interactive area:permissions
Lenguaje dominante
Shell
Estrellas
11.2k
Forks
1.9k
Merge medio
14 h 16 min
PR fusionados (30 d)
6

Descripción

### Describe the bug

When using `copilot` with the `-p` option, the current directory isn't checked against the allowed directories.

This seems like a big problem because one accidental invocation in the wrong place (like `$HOME`) potentially exposes a lot of private information with no confirmation to allow one to realize the mistake.

### Affected version

0.0.365 Commit: 76d0881

### Steps to reproduce the behavior

1. Create a test directory where Copilot doesn't have access to it or any parents already.
`mkdir test`
2. Change the current directory to the test directory.
`cd test`
3. Make a test file with potentially private content.
`echo "Private data!" > data.txt`
4. Check if Copilot can read the content.
`copilot -p "What are the files and their contents in the current directory?"`

### Expected behavior

Copilot should error in some way since the current directory was never approved for access.

### Additional context

As an aside, my output of the above command shows a misleading number of files found and lines read. Not sure what that's about.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.