feat: add warning in README.md

This commit is contained in:
35C4n0r 2026-03-13 19:23:14 +05:30
parent f73c20a50a
commit aa6c429a3c
No known key found for this signature in database
GPG Key ID: 5B71E5C9D18D5675

View File

@ -19,6 +19,9 @@ module "copilot" {
}
```
> [!WARNING]
> **Security Notice**: This module runs Copilot with `--allow-all` by default, which enables all permissions (equivalent to `--allow-all-tools --allow-all-paths --allow-all-urls`). This bypasses permission prompts and allows Copilot unrestricted access to tools, file paths, and URLs. Use this module _only_ in trusted environments.
> [!IMPORTANT]
> This example assumes you have [Coder external authentication](https://coder.com/docs/admin/external-auth) configured with `id = "github"`. If not, you can provide a direct token using the `github_token` variable or provide the correct external authentication id for GitHub by setting `external_auth_id = "my-github"`.