github-copilot-cli 1.0.109-1
seededverified· maintained by Dominiquini· LicenseRef-GitHub-Copilot
GitHub Copilot CLI brings the power of Copilot coding agent directly to your terminal.
shelly install aur github-copilot-cli --aur-url https://atoll.seafoam-labs.org
This can be permanently set in the shelly
config.json file.
git clone https://atoll.seafoam-labs.org/packages/github-copilot-cli.git
Served Git SHAs are synthesized by Atoll when it commits stored revisions - they do not match
upstream AUR.
/v1/packages/github-copilot-cli/versions SHAs are authoritative.
Metadata
Relations
Depends
Make dependencies
Conflicts
Provides
Security
Revision scans
| Revision | Status | Scanned | Findings |
|---|---|---|---|
| 2b258265928fhead | verified | 2026-11-11 00:43 | 3 |
| 2c9d90e180ef | verified | 2026-11-10 00:42 | 3 |
| 0fa715ede22c | verified | 2026-11-06 23:29 | 3 |
| 89a17baf0e09 | verified | 2026-11-06 02:18 | 3 |
| d49d6c120045 | verified | 2026-11-05 16:14 | 3 |
| 97bf5a6b1ab0 | verified | 2026-11-05 16:10 | 3 |
| 15e73de3c147 | verified | 2026-11-05 16:10 | 3 |
| bf831b08dab5 | verified | 2026-11-05 16:10 | 3 |
| b802875a5134 | verified | 2026-11-05 16:10 | 3 |
Head findings
medium
risky-tool
in
PKGBUILD'npm' is invoked - this fetches/executes external code outside alpm's control.
npm install -s -g \
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local tmppackage="$(mktemp)"
medium
command-substitution
in
PKGBUILDDynamic command construction - the effective command is computed at runtime and cannot be statically resolved.
local tmppackage="$(mktemp)"
Findings below High severity are retained for review but do not block serving. Verified means no obvious red flags from static analysis - never a guarantee that a package is safe.