Cloud and local sandboxes for GitHub Copilot

Configure local sandboxing for your sessions in the GitHub Copilot app and Copilot CLI, and manage cloud sandbox access for your organization or enterprise.

Enabling or disabling cloud sandboxes for your organization or enterprise

You can control whether members of your organization or enterprise can use cloud sandboxes by managing the cloud sandbox access policy in your organization or enterprise settings.

Using local sandboxing

Enable local sandboxing to restrict what Copilot can access on your machine in Copilot CLI or VS Code.

Configuring local sandbox settings

Configure local sandboxing in the GitHub Copilot app or Copilot CLI to restrict filesystem access, network connectivity, and credential use.