gcp Google Cloud release notes ·

Gemini Enterprise Agent Platform: CodeMender CLI Sandbox Default Enabled

securitygcpengineer
feature

The CodeMender CLI in the Gemini Enterprise Agent Platform now enables a process-level sandbox by default for enhanced workstation protection. This change aims to safeguard user environments when executing CLI commands. Users can disable the sandbox through `config.yaml`, the `--sandbox=false` flag, or bypass it using the `--unrestricted` flag. This update provides stronger default security for developers leveraging the platform.

Features (1)
  • Gemini Enterprise Agent Platform CodeMender CLI: Sandbox enabled by default

    This release updates the CodeMender CLI default behavior: Sandbox enabled by default : The CLI now runs commands inside the process-level sandbox by default to protect your workstation. You can disable the sandbox in your config.yaml , by passing --sandbox=false to CLI commands, or bypass it using the --unrestricted flag. For more information, see Install the CLI and configure .

Read the original announcement →

https://docs.cloud.google.com/release-notes#August_12_2026

Related releases