GitHub Copilot local sandboxing now generally available across CLI, app, and VS Code

GitHub has made local sandboxing for GitHub Copilot generally available in GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host.

Sandboxes restrict the filesystem, network, and credentials that Copilot-initiated tools and commands can access, based on developer or organization policies.

The feature is powered by Microsoft eXecution Container (MXC), supports Windows, macOS, and Linux, and is included at no additional cost.