From b76fb4950c30e9bb7836bcd54792066d077a1911 Mon Sep 17 00:00:00 2001
From: Ogulcan Celik <ogulcancelik@gmail.com>
Date: Mon, 22 Jun 2026 13:57:26 +0300
Subject: fix: detect copilot ask_user accept prompt

refs #725
---
 src/detect/manifests/github-copilot.toml | 20 +++++++++++++-------
 1 file changed, 13 insertions(+), 7 deletions(-)

(limited to 'src/detect')

diff --git a/src/detect/manifests/github-copilot.toml b/src/detect/manifests/github-copilot.toml
index dcd8e2ee..12af731d 100644
--- a/src/detect/manifests/github-copilot.toml
+++ b/src/detect/manifests/github-copilot.toml
@@ -1,7 +1,7 @@
 id = "copilot"
-version = "2026.06.10.1"
+version = "2026.06.22.1"
 min_engine_version = 1
-updated_at = "2026-06-10T00:00:00Z"
+updated_at = "2026-06-22T10:52:26Z"
 aliases = ["github-copilot", "ghcs"]
 
 [[rules]]
@@ -10,11 +10,17 @@ state = "blocked"
 priority = 300
 region = "whole_recent"
 visible_blocker = true
-contains = ["esc to cancel"]
-any = [
-  { contains = ["enter to select"] },
-  { contains = ["enter to confirm"] },
-  { contains = ["enter to submit"] },
+all = [
+  { any = [
+    { contains = ["esc to cancel"] },
+    { contains = ["esc cancel"] },
+  ] },
+  { any = [
+    { contains = ["enter to select"] },
+    { contains = ["enter to confirm"] },
+    { contains = ["enter to submit"] },
+    { contains = ["enter accept"] },
+  ] },
 ]
 
 [[rules]]
-- 
cgit v1.2.3