anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-21 17:56:33 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Feature Request: permissions for webfetch #1185

New Issue
Closed
opened 2026-02-16 17:29:54 -05:00 by yindo · 0 comments
yindo commented 2026-02-16 17:29:54 -05:00
Owner
Copy Link
Copy Source

Originally created by @kanaka on GitHub (Aug 8, 2025).

Originally assigned to: @thdxr on GitHub.

I would like to be able to run without any external network access/requests while running.

I tried doing this by disabling networking in the docker container where I run opencode, but opencode needs to do dep and module resolution on startup so that didn't work.

My immediate use case is that I'm doing some automated eval tasks (opencode run ...) and want to remove the variability and lack of reproducibility that comes from opencode getting data from the web.

The basic request is to add a permission setting for the webfetch tool. This isn't foolproof because opencode might try and fallback to using CLI tools via bash. So a complete solution would be someway to restrict opencode from all internet access once it does initial startup. But for now, permissions for webfetch would be awesome.

Originally created by @kanaka on GitHub (Aug 8, 2025). Originally assigned to: @thdxr on GitHub. I would like to be able to run without any external network access/requests while running. I tried doing this by disabling networking in the docker container where I run opencode, but opencode needs to do dep and module resolution on startup so that didn't work. My immediate use case is that I'm doing some automated eval tasks (`opencode run ...`) and want to remove the variability and lack of reproducibility that comes from opencode getting data from the web. The basic request is to add a permission setting for the webfetch tool. This isn't foolproof because opencode might try and fallback to using CLI tools via bash. So a complete solution would be someway to restrict opencode from all internet access once it does initial startup. But for now, permissions for webfetch would be awesome.
yindo closed this issue 2026-02-16 17:29:54 -05:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#1185
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?