anomalyco/opencode
1
0
Fork 0
mirror of https://github.com/anomalyco/opencode.git synced 2026-07-22 02:05:26 -04:00
Code Issues 5.9k Packages Projects Releases 19 Wiki Activity

Bash: Default permission is "allow" #6515

New Issue
Open
opened 2026-02-16 18:04:26 -05:00 by yindo · 2 comments
yindo commented 2026-02-16 18:04:26 -05:00
Owner
Copy Link
Copy Source

Originally created by @BackSlasher on GitHub (Jan 16, 2026).

Originally assigned to: @thdxr on GitHub.

Description

While spelunking the code, I saw that the default catchall is "allow all":
https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/agent/agent.ts#L50

I don't think this is intended, and think it should be changed to "ask".
I'm happy to hear if I'm wrong

Plugins

No response

OpenCode version

1.1.21

Steps to reproduce

No response

Screenshot and/or share link

No response

Operating System

No response

Terminal

No response

Originally created by @BackSlasher on GitHub (Jan 16, 2026). Originally assigned to: @thdxr on GitHub. ### Description While spelunking the code, I saw that the default catchall is "allow all": https://github.com/anomalyco/opencode/blob/dev/packages/opencode/src/agent/agent.ts#L50 I don't think this is intended, and think it should be changed to "ask". I'm happy to hear if I'm wrong ### Plugins _No response_ ### OpenCode version 1.1.21 ### Steps to reproduce _No response_ ### Screenshot and/or share link _No response_ ### Operating System _No response_ ### Terminal _No response_
yindo added the bug label 2026-02-16 18:04:26 -05:00
yindo commented 2026-02-16 18:04:26 -05:00
Author
Owner
Copy Link
Copy Source

@github-actions[bot] commented on GitHub (Jan 16, 2026):

This issue might be a duplicate of existing issues. Please check:

  • #5330: More explicit bash command permissions - related to default bash permission behavior
  • #5076: OpenCode should have better/safer defaults to be more security minded - discusses allowing by default and security concerns with current defaults
  • #8832: opencode not respecting permissions - related to permission enforcement issues

Feel free to ignore if none of these address your specific case.

@github-actions[bot] commented on GitHub (Jan 16, 2026): This issue might be a duplicate of existing issues. Please check: - #5330: More explicit bash command permissions - related to default bash permission behavior - #5076: OpenCode should have better/safer defaults to be more security minded - discusses allowing by default and security concerns with current defaults - #8832: opencode not respecting permissions - related to permission enforcement issues Feel free to ignore if none of these address your specific case.
yindo commented 2026-02-16 18:04:27 -05:00
Author
Owner
Copy Link
Copy Source

@mrclrchtr commented on GitHub (Jan 26, 2026):

It is intended, as I have read in other tickets.

@mrclrchtr commented on GitHub (Jan 26, 2026): It is intended, as I have read in other tickets.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
acp
bad
bug
discussion
docs
documentation
enhancement
extension
good first issue
growth
help-wanted
mcp
model-problem
needs:compliance
nix
opentui
perf
pull-request
Mirrored from GitHub Pull Request
 tui
web
windows
zen
No Label bug
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
yindo
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: anomalyco/opencode#6515
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?