Copilot CLI makes local sandboxing available to every user
1.0.93 (2026-10-07) makes local command sandboxing generally available; it remains default-off. Earlier 1.0.92 withholds ambient GITHUB_TOKEN unless configured and adds masked Git authentication. The documented proxy can inject selected credentials at permitted destinations. Stable at cutoff is 1.0.97. User settings left in config.json are ignored from 1.0.93, so upgrading alone does not enable an existing policy.
What this changes for operators
- Individual and managed CLI users: install 1.0.97, move user settings to settings.json and try /sandbox enable or copilot --sandbox -p for a controlled job. Inspect /sandbox status and /sandbox policy, then perform one authenticated Git operation and one denied destination test.
- Fleets requiring containment must set sandbox.enabled and sandbox.failIfUnavailable true and sandbox.allowBypass false, verifying supported hosts and managed delivery. Server-managed enabled alone can be declined on unsupported hosts; built-in file tools use best-effort software checks.
- Scope each masked secret’s injectHosts and inspect credential files separately. Test localhost workloads on macOS; Windows host rules rely on programs honoring the proxy. Full bypass restores ordinary credentials. Recorded platform-specific denial and credential-use results would settle the deployed boundary. This replaces some repeated credential inspection with maintained host lists and deliberate exceptions, without measured savings.
Primary sources
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github/copilot-cli / changelog.md#L42
- commit 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github.com/github/docs/commit/03b432e6d532
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github/docs / content/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes.md#L42-L64
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github/docs / content/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes.md#L116-L118
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github/docs / content/copilot/reference/enterprise-administrators/enterprise-managed-settings.md#L351-L363
- github_release 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed microsoft/mxc / v1.0.0
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings.md#L136-L147
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/copilot-cli / changelog.md#L60
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/copilot-cli / changelog.md#L75
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/copilot-cli / changelog.md#L93
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings.md#L155-L157
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/using-local-sandboxing.md#L103
- tagged_commit_file 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/using-local-sandboxing.md#L176-L182
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and github/copilot-cli / changelog.md#L45
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and github/docs / content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md#L62
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and github/docs / content/copilot/reference/copilot-cli-reference/cli-config-dir-reference.md#L62
- tagged_commit_file 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and github/docs / content/copilot/reference/copilot-cli-reference/cli-command-reference.md#L793
- tagged_commit_file 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced github/docs / content/copilot/concepts/security-governance-and-network-settings/about-cloud-and-local-sandboxes.md#L112
- tagged_commit_file 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced github/docs / content/copilot/how-tos/cloud-and-local-sandboxes/configuring-local-sandbox-settings.md#L250-L291
- tagged_commit_file 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced microsoft/mxc / src/mxc-sdk/src/backends/seatbelt/common/profile_builder.rs#L507-L536
- tagged_commit_file 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced microsoft/mxc / docs/backends/seatbelt/seatbelt-backend.md#L274-L315
Signal metadata
Source findings
- 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed 2026-10-13-github-copilot-cli-1-0-93-opens-local-sandboxing-to-every-user-it-stays-off-by-default-and-a-server-managed
- 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca 2026-10-13-github-copilot-cli-sandboxed-commands-now-get-placeholder-credentials-github-token-withheld-1-0-92-and-a-loca
- 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and 2026-10-13-github-copilot-cli-1-0-93-ignores-user-settings-left-in-copilot-config-json-breaking-plus-retired-models-and
- 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced 2026-10-13-github-copilot-cli-ga-docs-rewrite-the-sandbox-network-rules-local-network-off-macos-and-linux-egress-forced
Featured in
- The Handoff Has an API / 2026-10-13
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0
Schema: bitter.frontier_signals.v0 / ID: 2026-10-13-github-copilot-cli-local-sandbox-and-credential-proxy
Research evidence and publication history are open in the repository.