Skip to content

Approval for commands is not fine grained enough (subcommand permission) #572

@st3fan

Description

@st3fan

Describe the bug

Like other coding agents, copilot asks if it is allowed to run commands. However, for commands like uv or cargo that can do many things, it only asks permission for the top level command and not for the actual subcommand that it wants to run.

This is problematic because uv run can run anything including destructive scripts or carg some-plugin can make unintended changes.

This is a request to allow for more fine grained permissions where I can approve what Copilot actually intends to execute.

Affected version

No response

Steps to reproduce the behavior

No response

Expected behavior

No response

Additional context

No response

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions