Repository navigation
Bug: Plan mode allows creating GitHub issues via gh CLI #34390
Description
Description
While in Plan Mode (read-only), it is possible to create GitHub issues using gh issue create and make API calls via gh api/curl. This violates the constraint that Plan Mode should be read-only.
Steps to Reproduce
- Be in Plan Mode
- Run any of:
gh issue create -R <repo> --title "test" --body "test"curl -X PATCH -H "Authorization: ..." "https://api.github.com/repos/user/repo/issues/1"gh issue comment <id> -R <repo> --body "..."
- The actions succeed — no read-only enforcement
Expected Behavior
Plan Mode should reject write operations — at minimum, Git/API pushes and issue/PR creation.
Actual Behavior
All operations complete successfully. The only restriction is a user-facing message that reads "I am in Plan Mode" but no actual enforcement.
Environment
- Linux Mint 22.3 (Zena)
- GitHub CLI 2.x
- opencode: latest (from git)
Metadata
Metadata
Assignees
Labels
No labels
Activity
github-actions commentedon Jun 29, 2026
This issue might be a duplicate of existing issues. Please check:
ghCLI. Same root cause (bash tool unrestricted in plan mode, only prompt-level enforcement), same symptom (gh issue comment/gh issue createsucceeding in plan mode).If your issue is specifically about
ghCLI / remote API calls (not local file writes), #34190 is the closest match.TonyGarces commentedon Aug 13, 2026
Addressed in the
ranexfork (plan-mode-bash-guard, commitde1e2e5618) — see comment on #34190: Plan mode now denies/ prompts on mutating gh/git/curlcommands and built-in GitHub writes. Closes thegh issue create/gh apibypass.neriousy commentedon Oct 1, 2026
Closing as a duplicate of #34190, which tracks Plan mode letting the agent run mutating
ghcommands (comments, issues, API calls). Please follow and 👍 there.