3 ms·

whitelisting `gh` args should solve it. Event opencode's primitive permission system allows that.

• tredre3 6mo ago
  The ability to whitelist specific args for commands has been the source of several (countless?) sudo CVEs over the years.