It’s Cybersecurity Awareness Month! Join our interactive training session, or learn about security and AI from 1Password experts.
Forum Discussion
request: remember application approval for SSH agent
my intelliJ app has Git Toolbox plugin which checks git via SSH every 10 minutes. Due to this, I continuously get 1Password 8 on macOS asking if I want to allow this PHPStorm to access the SSH key. ...
I believe "Approve for all applications" appearing as a checkbox when access requested is non-sensical.
The 1Password Developer settings has you explicitly set whether you should "ask approval for each new application", or even a higher security posture, "ask for each new application and terminal session". There's no option to approve for all applications.
Taking a step back, a user wishing to approve for all applications wouldn't turn on the SSH agent at all since they would just leave ~/.ssh on disk. So it's a vector for a security leak if someone clicks there.
If a popup shows up with an application (in my case, the IDE) requiring access, then "Always approve for this application" is expected. But surprisingly that doesn't seem to be a possibility. Unfortunately it doesn't seem possible to have the IDE process launching terminal windows to use a fixed process ID if that's what 1P is using to determine whether something constitutes a new application which approval is already granted for.
