3 ms·

When the agent uses your GH credentials to nuke all your projects or put out a lot of crap, this separation will not save you.

• nopurpose 6mo ago
  whitelisting `gh` args should solve it. Event opencode's primitive permission system allows that.
  • tredre3 6mo ago
    The ability to whitelist specific args for commands has been the source of several (countless?) sudo CVEs over the years.