Major security regression merged into OpenCode V2

(github.com)

13 points | by verdverm 6 hours ago ago

4 comments

  • verdverm 6 hours ago ago

    This fundamentally breaks our security posture capability for harness configuration, ending our ability to prevent company policy breaking changes by man, machine, or third party repo.

    We may be a minority in using /etc/opencode in this way, but it has shaken my trust that they understand security in the Ai era or the needs of enterprise users.

    • TZubiri 4 hours ago ago

      Why are you still using opencode after the main LLM providers released their own harnesses? Inertia?

      • LoFiSamurai 2 hours ago ago

        Probably the opposite? Avoiding a provider dependency would be my guess

      • undefined 3 hours ago ago
        [deleted]