Codex (VS code) running commands without permission?

Coding with ChatGPT Codex CLI
1

Usually Codex asks for permission before running any code but this time it ran it by itself after making changes to the code base (see attached screenshots).

Is this intended behavior? Is there a setting to ensure that Codex will always ask permissions?

codex_perm
codex_perm1414×698 93 KB

vscode settings.json
{
    "workbench.colorTheme": "Default Dark+",
    "python.defaultInterpreterPath": "",
    "terminal.integrated.inheritEnv": false,
    "security.workspace.trust.startupPrompt": "always",
    "git.ignoreLegacyWarning": true,
    "r.plot.useHttpgd": true,
    "csv-preview.formatValues": "never",
    "csv-preview.capitalizeHeaders": false,
    "jupyter.askForKernelRestart": false,
    "editor.inlineSuggest.enabled": true,
    "github.copilot.enable": {
        "*": true,
        "plaintext": false,
        "markdown": false,
        "scminput": false
    },
    "github.copilot.editor.enableAutoCompletions": true,
    "security.workspace.trust.untrustedFiles": "open",
    "update.mode": "manual",
    "[cpp]": {
        "editor.defaultFormatter": "xaver.clang-format"
    },
    "C_Cpp.clang_format_fallbackStyle": "{ BasedOnStyle: Google, IndentWidth: 2, ColumnLimit: 0}",
    "window.zoomLevel": -1,
    "workbench.startupEditor": "none",
    "github.copilot.nextEditSuggestions.enabled": true,
    "chatgpt.config": {

    },
    "chatgpt.apiBase": ""
}