github / github/copilot-cli

Prompt mode `-p` doesn't respect allowed directories

Ouverte
#668 0 commentaires 0 réactions 0 personnes assignées Voir sur GitHub
area:non-interactive area:permissions
Langage dominant
Shell
Étoiles
11.2k
Forks
1.9k
Merge moyen
14 h 16 min
PR mergées (30 j)
6

Description

### Describe the bug

When using `copilot` with the `-p` option, the current directory isn't checked against the allowed directories.

This seems like a big problem because one accidental invocation in the wrong place (like `$HOME`) potentially exposes a lot of private information with no confirmation to allow one to realize the mistake.

### Affected version

0.0.365 Commit: 76d0881

### Steps to reproduce the behavior

1. Create a test directory where Copilot doesn't have access to it or any parents already.
`mkdir test`
2. Change the current directory to the test directory.
`cd test`
3. Make a test file with potentially private content.
`echo "Private data!" > data.txt`
4. Check if Copilot can read the content.
`copilot -p "What are the files and their contents in the current directory?"`

### Expected behavior

Copilot should error in some way since the current directory was never approved for access.

### Additional context

As an aside, my output of the above command shows a misleading number of files found and lines read. Not sure what that's about.

Guide de contribution

Ouvrir le guide de contribution

Évaluation

Cette issue n'a pas encore été évaluée.

Recevez les nouvelles issues par e-mail

Un résumé court des issues GitHub adaptées aux débutants.