Skip to content

GitHub Copilot: Local sandboxing in the GitHub Copilot app

Released · GitHub / Microsoft

Security fix

Models:Adds Claude Opus 5.5 ·Adds GPT-6 Sol ·Adds GPT-6 Luna ·Adds Grok 4.7

What the release notes say

Local sandboxing helps reduce the potential impact of unintended commands by limiting access to files, network resources, and credentials on your machine. In the GitHub Copilot app, you configure it per project for local repository and working tree sessions. The project's sandbox settings include:

  • Filesystem: Additional read/write, additional read-only, and denied folder lists.
  • Network: Outbound internet and local network settings.
  • Credentials: Git credentials for authenticated HTTPS git operations, and GitHub CLI credentials for GitHub CLI authentication. These project settings describe the policy that the app requests when a sandboxed session starts. The effective policy can be more restrictive when enterprise-managed settings apply. If your operating system cannot enforce the requested policy, the sandboxed shell fails with an error rather than running without a sandbox. Get started Local sandboxing is off by default. Open the app settings, select your project, and turn on Sandbox new sessions under "Sandbox". This applies to new sessions in the project, not sessions already running. Changes to filesystem, network, and credential settings apply to new sessions or when an existing session restarts. To enable sandboxing for an active local session, enter /sandbox on . This changes that session without changing the project default. Local sandboxing does not apply to cloud sandbox sessions or sessions running on a remote host. GitHub Copilot app and Copilot CLI sandbox settings are configured separately. Local sandboxing is in public preview and subject to change. Learn more about configuring local sandboxing in the GitHub Copilot app . copilot Share Copied Shared Related Posts Sep.23 More ways to request and configure Copilot code reviews copilot Sep.22 Release OpenTelemetry in the GitHub Copilot app copilot Sep.22 Release New features and improvements in Copilot for JetBrains copilot Sep.22 Release Faster C++ code intelligence with whole codebase indexing copilot Sep.22 Release Claude Opus 5.5 is now available in GitHub Copilot copilot Sep.22 Release OpenAI’s GPT-6 Sol and GPT-6 Luna now available copilot Sep.21 Release Grok 4.7 is now available in GitHub Copilot copilot Sep.18 Improvement Copilot code review: An improved review experience copilot Sep.18 Release GitHub Copilot weekly releases — September 14 copilot Discover tips, technical guides, and best practices in our biweekly newsletter just for devs.
<form method="post" action="https://s88570519.t.eloqua.com/e/