Hello, we have just released copr-dist-git 0.36 with important security fix. Spec files were parsed directly on host machine without any isolation mechanism. As spec file parsing may produce unwanted side effects, this is _not_ recommendable. We have made the calls run in isolation now.
COPR team
copr-devel@lists.stg.fedorahosted.org