GitHub Copilot app adds per-repo sandboxing with folder and network controls

lee_stott · x · 2026-10-15

The GitHub Copilot app now offers a per-repo option to sandbox all sessions, with granular controls for read/write folders, read-only and denied folders, outbound internet, local network access, and Git credentials. It runs on MXC (Windows), Seatbelt (macOS), and bubblewrap (Linux). Microsoft also previewed that Copilot will decide when a task is best handled by on-device intelligence versus cloud-scale models, bringing local models and sandboxed tools to Windows and GitHub Copilot.

Original post →

More from coding & agent

coding & agent channel →