From the source
From the source
Local sandboxing for Copilot agentic workflows is now GA
GitHub made local sandboxing generally available for Copilot CLI, the Copilot app, and VS Code sessions using Agent Host.
The feature restricts tool and command access to filesystem, network, credentials, and other system capabilities based on developer- or organization-defined policies, and is included at no additional cost.
From the source
Local sandboxes give developers a secure execution boundary for agentic workflows on their own machines. Tools and commands initiated by Copilot run with restricted access to the filesystem, network, credentials, and other system capabilities, based on policies defined by the developer or their organization.
github.blog
