Skip to content
Trending storyDeveloping

GitHub makes local sandboxing for GitHub Copilot generally available

6 articles2 sourcessince Oct 7Last article 3h ago ·

Overview

AISummary of 6 articles

GitHub says local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

Copilot-initiated tools and commands run with restricted access to the filesystem, network, and credentials, under policies that developers or their organizations set. GitHub says the feature is included with GitHub Copilot at no additional cost.

Enterprise administrators can use managed settings to require sandboxing and enforce policies developers cannot weaken. A later changelog entry says they can also set forceRemoteSettingsRefresh to true so supported clients fetch current policy at startup instead of using a cached one, and clients that cannot confirm current policy fail closed. The sandbox managed settings key can require a minimum client version, so users on older Copilot clients must update before they can resume using Copilot.

Separately, GitHub posted on X that Copilot will soon route tasks automatically to a local model when that is most suitable, to help users save on AI credits, as part of Project HydraFusion. The post gives no release date for the routing feature.

Written by AI from the articles below · updated Oct 13, 1:15 PM ET

Check the sources:

Developments

3 developments

  1. Oct 13, 11:20 AM ET · 1 article
    GitHub adds forced settings refresh and minimum client version enforcement for Copilot enterprise managed settings
    GitHub Copilot Changelog: GitHub Copilot adds forced settings refresh and minimum client versions for enterprises
  2. Oct 7, 2:12 PM ET · 2 articles
    GitHub bringing local models and sandboxed tools to GitHub Copilot
    GitHub: GitHub Copilot adds local models and sandboxed tools for developer control
  3. Oct 7, 11:46 AM ET · 2 articles
    Local sandboxing for GitHub Copilot now generally available
    GitHub Copilot Changelog: GitHub Copilot local sandboxing is now generally available

Article timeline

The articles in this story. Times are ET.

Oct 13
  1. GitHub Copilot ChangelogOfficial
    GitHub Copilot adds forced settings refresh and minimum client versions for enterprises

    AIGitHub lets enterprise administrators set forceRemoteSettingsRefresh to true so supported GitHub Copilot clients fetch current managed settings at startup instead of using a cached policy. Clients that cannot confirm current policy fail closed. The sandbox managed settings key can also require a minimum client version, forcing users on older Copilot clients to update before they can resume using Copilot.

Oct 9
  1. GitHub Copilot ChangelogOfficial
    GitHub Copilot adds Claude Haiku 5.5, local sandboxing, and a separate-account option.

    AIGitHub makes Claude Haiku 5.5 available to Copilot Pro, Pro+, Max, Business, and Enterprise users. Local sandboxing, which limits agents' access to files, networks, and credentials, is now generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host, at no extra cost. The Copilot app now lets users sign in with separate GitHub accounts for their Copilot license and their repositories.

Oct 7
  1. GitHubOfficial
    GitHub Copilot local sandboxing becomes generally available

    AILocal sandboxing for GitHub Copilot is now generally available. It lets Copilot run commands in an isolated environment with controlled access to files, networks, system capabilities, and credentials. Enterprise teams can also centrally manage policies, and the feature is available in GitHub Copilot CLI, the GitHub Copilot app, and @code.

  2. GitHubOfficial
    GitHub Copilot adds local models and sandboxed tools for developer control

    AIGitHub is bringing local models and sandboxed tools to GitHub Copilot, giving developers more choice and control over their workflows. The post links to a page with further details, but it does not specify particular models, features, or availability.

  3. GitHubOfficial
    GitHub Copilot to route tasks to local models automatically

    AIGitHub announced that Copilot will soon automatically route tasks to a local model when it is most suitable. The feature is part of Project HydraFusion and is intended to help users save on AI credits.

    Video from @github's post
  4. GitHub Copilot ChangelogOfficial
    GitHub Copilot local sandboxing is now generally available

    AIGitHub says local sandboxing for GitHub Copilot is now generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host. Copilot-initiated tools and commands run with restricted access to the filesystem, network, and credentials, under policies set by developers or their organizations. The feature is included with GitHub Copilot at no additional cost.

Heat trend

Not enough continuous observations to show a trend yet.