Hello, we have just released copr-dist-git 0.36 with important security fix. Spec files were parsed directly on host machine without any isolation mechanism. As spec file parsing may produce unwanted side effects, this is _not_ recommendable. We have made the calls run in isolation now.

COPR team