-
-
Notifications
You must be signed in to change notification settings - Fork 5
Description
Hello,
I am currently experiencing an issue with Git not working as expected. My goal is to have Copilot create Git commits more frequently; however, git is currently not functional and aborts with the following error message: fatal: detected dubious ownership in repository.
Below you can find the detailed debug output and environment information for reference:
[DEBUG] === copilot_yolo called with args:
[DEBUG] Checking for updates...
[DEBUG] Ensuring binary is installed...
[DEBUG] Executing binary in YOLO mode: C:\Users\z555555\.local\bin\copilot_here.exe --yolo
[DEBUG] === Application started ===
[DEBUG] Args: --yolo
[DEBUG] YOLO mode: True
[DEBUG] App name: copilot_yolo
[DEBUG] Normalized args: --yolo
[DEBUG] Invoking command parser...
[DEBUG] Checking dependencies...
[DEBUG] Displaying dependency results (hasFailures: False, isDebugMode: True)
[DEBUG] All dependencies satisfied
[DEBUG] Validating GitHub auth scopes...
[DEBUG] ValidateScopes called
📋 Dependency Check:
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
✅ GitHub CLI (gh) (2.81.0)
✅ Docker (29.1.5)
✅ Docker Daemon (Running)
━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
[DEBUG] gh auth status output:
✓ Logged in to ********* account ******** (keyring)
- Active account: true
- Git operations protocol: https
- Token: gho_************************************
- Token scopes: 'copilot', 'gist', 'read:org', 'read:packages', 'repo'
[DEBUG] End of output
[DEBUG] hasCopilotScope: True
[DEBUG] hasPackagesScope: True
🚀 Using image: ghcr.io/gordonbeeming/copilot_here:latest
🤖 Using model: default
📥 Pulling image: ghcr.io/gordonbeeming/copilot_here:latest
[DEBUG] Scope validation passed
[DEBUG] Auth validation passed
[DEBUG] Selected image: ghcr.io/gordonbeeming/copilot_here:latest
[DEBUG] Adding YOLO mode flags
[DEBUG] Pulling Docker image...
[DEBUG] PullImage called for: ghcr.io/gordonbeeming/copilot_here:latest
[DEBUG] Starting docker process: docker pull ghcr.io/gordonbeeming/copilot_here:latest
[DEBUG] Docker process started with PID: 20640
[DEBUG] Waiting for docker process to exit...
latest: Pulling from gordonbeeming/copilot_here
Digest: sha256:0cd1dcf945c34937b69b054da36e80705603d0b19f5f1744ccc3f8c05d2e2a21
Status: Image is up to date for ghcr.io/gordonbeeming/copilot_here:latest
ghcr.io/gordonbeeming/copilot_here:latest
✅ Image pulled successfully
[DEBUG] Docker process exited with code: 0
🧹 Cleaning up old images (older than 7 days)...
[DEBUG] Docker image pull succeeded
✓ No old images to clean up
🛡️ Airlock: enabled - global (~/.config/copilot_here/network.json)
🛡️ Starting in Airlock mode...
App image: ghcr.io/gordonbeeming/copilot_here:latest
Proxy image: ghcr.io/gordonbeeming/copilot_here:proxy
Network config: C:\Users\z555555\.config\copilot_here\network.json
Compose file: C:\Users\z555555\AppData\Local\Temp\copilot-airlock-76f393bd099144d1846fc27c8854ac7f.yml
File length: 2710 chars
--- BEGIN COMPOSE FILE ---
# Airlock - Docker Compose Configuration
# Generated by copilot_here for secure network proxy mode
#
# The app container is on an airlock and can ONLY reach the proxy.
# The proxy bridges to the external network - no direct internet access from app.
#
# Environment variables read from shell (NOT written to file for security):
# GITHUB_TOKEN - GitHub token for authentication
networks:
airlock:
internal: true
bridge:
volumes:
proxy-ca:
# Shared CA certificate between proxy and app
services:
proxy:
image: ghcr.io/gordonbeeming/copilot_here:proxy
container_name: "myapp-copilot-migration-3743aa13-proxy"
networks:
- airlock # Receives requests from app container
- bridge # Makes outbound requests to external network
volumes:
- /c/Users/z555555/.config/copilot_here/tmp/network-639056632301052303.json:/config/rules.json:ro
- proxy-ca:/ca
- /d/dev/myapp-copilot-migration/.copilot_here/logs:/logs
healthcheck:
test: ["CMD", "curl", "-f", "http://localhost:58080/health"]
interval: 5s
timeout: 3s
retries: 10
start_period: 10s
app:
image: ghcr.io/gordonbeeming/copilot_here:latest
container_name: "myapp-copilot-migration-3743aa13-app"
networks:
- airlock # ONLY on airlock - cannot reach external network directly
environment:
- HTTP_PROXY=http://proxy:58080
- HTTPS_PROXY=http://proxy:58080
- http_proxy=http://proxy:58080
- https_proxy=http://proxy:58080
- PUID=1000
- PGID=1000
- GITHUB_TOKEN=${GITHUB_TOKEN}
- TERM=${TERM:-xterm-256color}
- COPILOT_HERE_SESSION_INFO={"copilot_here_version":"2026.01.05","image":{"tag":"latest","full_name":"ghcr.io/gordonbeeming/copilot_here:latest"},"mode":"yolo","working_directory":"/work/d/dev/myapp-copilot-migration","mounts":[],"airlock":{"enabled":true,"rules_path":"C:\\Users\\z555555\\.config\\copilot_here\\tmp\\network-639056632301052303.json","source":"global","network_config":{"mode":"enforce","logging_enabled":true}}}
volumes:
- proxy-ca:/ca:ro
- /c/Users/z555555/.config/copilot-cli-docker:/home/appuser/.copilot
- /d/dev/myapp-copilot-migration:/work/d/dev/myapp-copilot-migration
working_dir: /work/d/dev/myapp-copilot-migration
entrypoint: ["/usr/local/bin/entrypoint-airlock.sh"]
command: ["copilot", "--allow-all-tools", "--allow-all-paths", "--add-dir", "/work/d/dev/myapp-copilot-migration", "--allow-all-tools", "--allow-all-paths", "--banner"]
depends_on:
proxy:
condition: service_healthy
stdin_open: true
tty: true
--- END COMPOSE FILE ---
�]0;🤖⚡️ myapp-copilot-migration 🛡️
time="2026-02-02T22:07:11+01:00" level=warning msg="No services to build"
Container myapp-copilot-migration-3743aa13-proxy Running
time="2026-02-02T22:07:12+01:00" level=warning msg="No services to build"
Container myapp-copilot-migration-3743aa13-proxy Waiting
Container myapp-copilot-migration-3743aa13-proxy Healthy
Container myapp-copilot-migration-3743aa13-app-run-5c7560edd717 Creating
Container myapp-copilot-migration-3743aa13-app-run-5c7560edd717 Created
🔧 Initializing Copilot Container (Airlock)...
⏳ Waiting for proxy CA certificate...
📜 Trusting Proxy CA Certificate...
Updating certificates in /etc/ssl/certs...
1 added, 0 removed; done.
Running hooks in /etc/ca-certificates/update.d...
done.
✅ Container Ready.
GID 1000 is already in use by node, moving it to 1001
UID 1000 is already in use by node, moving it to 1001
OS: Windows 11
Shell: PowerShell 7.5.4
Expected: git status / git commit -m "..." works
Actual:
✗ $ git status
╭────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╮
│ fatal: detected dubious ownership in repository at '/work/d/dev/myapp-copilot-migration' │
│ To add an exception for this directory, call: │
│ │
│ git config --global --add safe.directory /work/d/dev/myapp-copilot-migration
│ │
╰────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────╯
GitHub Copilot v0.0.400
Proxy does not block anything.
I have already tried the following without success:
git config --global --add safe.directory /work/d/dev/myapp-copilot-migrationgit config --global --add safe.directory '*'git config --add safe.directory /work/d/dev/myapp-copilot-migrationgit config --add safe.directory '*'- mounting
~/.gitconfig
Unfortunately, none of these approaches resolved the issue. Any guidance or suggestions on how to properly address this problem would be greatly appreciated.
Thank you very much for your time and support.