Skip to content

PowerShell approval parser requires full-script review for simple Git commands in 1.0.107 #5379

Open

Description

@ShaneGroff

Describe the bug

Even after being given permission to run git commands, CLI 1.0.106 is generating permission prompts for simple git commands.

Image

result of /diagnose:
Diagnosis: this is a CLI parser bug, not a safety reviewer decision.

For permission request  aa373d4d-6adf-4429-b16e-d53b40b034a8 :

• The valid command was incorrectly split into two command segments.
• The parser dropped/misread part of  --unified=5 .
• It classified  git diff  as  readOnly: false .
•  hasParseErrors: true  caused the full-script warning.
• Saved approval  git -C  was recognized, but the bogus second segment had no approval match.
• Assisted approval was not run ( reason: inactive ); manual permission mode prompted you directly.
• Completion records  cancelled: Session aborted ; no decision source was recorded.

The prior version 1.0.105 did not generate this problem, 1.0.106 did

Affected version

1.0.107

Steps to reproduce the behavior

Tell copilot to execute a git command:
git -C D:\office\src --no-pager diff --unified=5 7f4cc140666e5e0ad517ac7f17262a7a75599c91..user/shaneg/remove-cg-syscmd-get-version-info -- access/docs/specs/round-corners.md

you get a prompt for permission, say yes

Now do it again

You get a permission prompt, it says "Could not fully parse this command, so the commands it runs cannot be listed reliably. Review the full script"

Expected behavior

No further permission prompt for simple git commands once I've granted permission

Additional context

I have a .tgz file created from /collect-debug-logs, but am not including it here, since it contains private information

Activity

  1. added theissue type on Nov 7, 2026
  2. added
    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictions
    area:platform-windowsWindows-specific: PowerShell, cmd, Git Bash, WSL, Windows Terminal
    and removed on Nov 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area:permissionsTool approval, security boundaries, sandbox mode, and directory restrictionsarea:platform-windowsWindows-specific: PowerShell, cmd, Git Bash, WSL, Windows Terminal

    Type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions