{"slug": "local-sandboxing-in-the-github-copilot-app", "title": "Local sandboxing in the GitHub Copilot app", "summary": "GitHub launched local sandboxing in public preview for the GitHub Copilot app, letting developers configure per-project limits on filesystem access, network resources, and credentials for local repository and working tree sessions. The feature is off by default and is enabled by turning on \"Sandbox new sessions\" in app settings or by entering /sandbox on for an active local session, and sandboxed shells fail with an error rather than running unsandboxed if the operating system cannot enforce the requested policy. Local sandboxing does not apply to cloud sandbox sessions or sessions on a remote host, and GitHub Copilot app and Copilot CLI sandbox settings are configured separately.", "body_md": "# Local sandboxing in the GitHub Copilot app\n\nLocal sandboxing helps reduce the potential impact of unintended commands by limiting access to files, network resources, and credentials on your machine. In the GitHub Copilot app, you configure it per project for local repository and working tree sessions.\n\nThe project’s sandbox settings include:\n\n- Filesystem: Additional read/write, additional read-only, and denied folder lists.\n- Network: Outbound internet and local network settings.\n- Credentials: Git credentials for authenticated HTTPS git operations, and GitHub CLI credentials for GitHub CLI authentication.\n\nThese project settings describe the policy that the app requests when a sandboxed session starts. The effective policy can be more restrictive when enterprise-managed settings apply.\n\nIf your operating system cannot enforce the requested policy, the sandboxed shell fails with an error rather than running without a sandbox.\n\n## [Get started](#get-started)\n\nLocal sandboxing is off by default. Open the app settings, select your project, and turn on **Sandbox new sessions** under “Sandbox”. This applies to new sessions in the project, not sessions already running. Changes to filesystem, network, and credential settings apply to new sessions or when an existing session restarts.\n\nTo enable sandboxing for an active local session, enter `/sandbox on`. This changes that session without changing the project default.\n\nLocal sandboxing does not apply to cloud sandbox sessions or sessions running on a remote host. GitHub Copilot app and Copilot CLI sandbox settings are configured separately.\n\nLocal sandboxing is in public preview and subject to change.\n\nLearn more about [configuring local sandboxing in the GitHub Copilot app](https://gh.io/github-app-local-sandboxing).", "url": "https://wpnews.pro/news/local-sandboxing-in-the-github-copilot-app", "canonical_source": "https://github.blog/changelog/2026-09-23-local-sandboxing-in-the-github-copilot-app", "published_at": "2026-09-23 15:00:57+00:00", "updated_at": "2026-09-23 15:31:00.655180+00:00", "lang": "en", "topics": ["ai-products", "ai-tools", "developer-tools", "ai-agents"], "entities": ["GitHub", "GitHub Copilot app", "Copilot CLI"], "alternates": {"html": "https://wpnews.pro/news/local-sandboxing-in-the-github-copilot-app", "markdown": "https://wpnews.pro/news/local-sandboxing-in-the-github-copilot-app.md", "text": "https://wpnews.pro/news/local-sandboxing-in-the-github-copilot-app.txt", "jsonld": "https://wpnews.pro/news/local-sandboxing-in-the-github-copilot-app.jsonld"}}