GitHub Copilot app gains local sandboxing for enhanced security
GitHub has introduced local sandboxing for the GitHub Copilot app, a public preview feature designed to reduce the impact of unintended commands. This capability limits access to files, network resources, and credentials on a user's machine, configurable per project for local repository and working tree sessions. Settings include granular control over filesystem access, network connectivity, and Git/GitHub CLI credentials. While off by default, users can enable it per project or for individual sessions, offering a significant security enhancement for Copilot app users.
Features (1) ›
- Introduce local sandboxing for GitHub Copilot app sessions
The GitHub Copilot app now supports local sandboxing in public preview, allowing users to configure access policies per project. This limits a session's reach to the local filesystem, network resources, and specified credentials, enhancing security by mitigating risks from unintended commands. The feature is off by default and can be enabled for new sessions or existing ones, with enterprise-managed settings potentially overriding individual project configurations.
https://github.blog/changelog/2026-09-23-local-sandboxing-in-the-github-copilot-app
Related releases
- GitHub Enterprise Cloud introduces proof of presence for high-impact actions GitHub Changelog ·
- GitHub Actions Deprecates Node 20, Requires Node 24 for JavaScript Actions GitHub Changelog ·
- GitHub Copilot Code Review Gets Enhanced Personal & Enterprise Configuration GitHub Changelog ·
- GitHub Copilot App Adds OpenTelemetry Support for Enterprise Monitoring GitHub Changelog ·
- GitHub Copilot for JetBrains 1.18.0 Adds AI-Assisted Approvals, Shared Skills GitHub Changelog ·
- GitHub Copilot CLI now offers faster C++ code intelligence with whole codebase indexing GitHub Changelog ·