Restrict what GitHub Copilot agents can touch with local sandboxing
Added to DistroCool on 2026-10-19 · Discovery date, not a release announcement
GitHub Copilot local sandboxing is generally available in Copilot CLI, the Copilot app and VS Code Agent Host sessions. Policies can limit filesystem, network and credential access for agent-run tools and commands.
Why it matters
A sandbox can reduce the impact of an unintended command by separating model behavior from tool permissions. It does not make generated code correct, and the policy still needs to match the task. GitHub says the feature is included with Copilot at no additional cost.
Try this next.
Enable a sandbox for a disposable test repository, allow writes only inside that project and block network and credentials unless the task truly needs them. Confirm denied actions fail before using it on real work. DistroCool has not independently tested this example.
Open the practical workflow →Source: GitHub Copilot changelog ↗