Local sandboxing for GitHub Copilot now generally available github.blog
GitHub says local sandboxing is generally available in Copilot CLI, the Copilot app, and VS Code sessions using Agent Host, at no extra cost. Powered by Microsoft eXecution Container, it applies developer- or organization-defined limits to agent tools’ access to files, networks, and credentials across Windows, macOS, and Linux.