Are you malware?

[Madongming]

Type: Bug

GitHub copilot's find . command in my home directory searched all my files! This has happened several times before! Shouldn't it only allow access to folders listed in the workspace? Otherwise, this is extremely insecure!

Extension version: 0.33.3
VS Code version: Code 1.106.2 (Universal) (1e3c50d, 2025-11-19T16:56:50.023Z)
OS version: Darwin arm64 25.1.0
Modes:

[vs-code-engineering]

Thanks for creating this issue! It looks like you may be using an old version of VS Code, the latest stable release is 1.106.3. Please try upgrading to the latest version and checking whether this issue remains.

Happy Coding!

[Tyriar]

You either pressed allow or opted in to terminal auto approve where some find commands are auto approved by default. The terminal tool is not restricted to only the workspace folder. Stay tuned as we're exploring sandboxing: #280236