-
Notifications
You must be signed in to change notification settings - Fork 1.3k
Support a default config file for permissions #2398
Copy link
Copy link
Open
Labels
area:configurationConfig files, instruction files, settings, and environment variablesConfig files, instruction files, settings, and environment variablesarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictionsTool approval, security boundaries, sandbox mode, and directory restrictions
Metadata
Metadata
Assignees
Labels
area:configurationConfig files, instruction files, settings, and environment variablesConfig files, instruction files, settings, and environment variablesarea:permissionsTool approval, security boundaries, sandbox mode, and directory restrictionsTool approval, security boundaries, sandbox mode, and directory restrictions
Type
Fields
Give feedbackNo fields configured for Feature.
Describe the feature or problem you'd like to solve
Setting permissions for every copilot session is too time consuming
Proposed solution
The current copilot CLI permissions behavior is detailed, but a bit of a hassle to set up for every session.
I suspect this ends up in two types of common user behaviors
User type A - nearly always runs
/yoloUser type B - uses a lot of time accepting permissions when copilot CLI requests for it
I'd like to propose a copilot CLI default config file which will controls default permissions to tools, paths, shell commands and urls etc. This way users won't have to set up this for every new copilot session.
The config file should be used by default. The behavior should be overridable via CLI flags. E.g.
copilot --allow-all-urlswill take precedence of whatever is set of allowed urls in the config file. To disable the usage of the config file, a flag which explicitly disables reading the global config can be provided for the current session.Example prompts or workflows
No response
Additional context
No response