Skip to content

fix(opencode): confirm insecure serve#10949

Closed
MaxMiksa wants to merge 1 commit into
anomalyco:devfrom
MaxMiksa:harden/server-serve-password
Closed

fix(opencode): confirm insecure serve#10949
MaxMiksa wants to merge 1 commit into
anomalyco:devfrom
MaxMiksa:harden/server-serve-password

Conversation

@MaxMiksa

Copy link
Copy Markdown
Contributor

Fixes #10948.

What does this PR do?

  • When binding opencode serve to a non-loopback hostname without OPENCODE_SERVER_PASSWORD, require explicit confirmation before starting.
  • Avoids hanging in non-interactive environments by refusing to start unless --yes is provided.

How did you verify your code works?

  • bun test test/cli/serve-security.test.ts
  • bun run typecheck

@github-actions

Copy link
Copy Markdown
Contributor

The following comment was made by an LLM, it may be inaccurate:

No duplicate PRs found

@github-actions

Copy link
Copy Markdown
Contributor

Closing this pull request because it has had no updates for more than 60 days. If you plan to continue working on it, feel free to reopen or open a new PR.

@github-actions github-actions Bot closed this Mar 30, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

serve: require explicit confirmation when binding non-loopback without OPENCODE_SERVER_PASSWORD

1 participant