Signals / github-copilot-cli profile
github-copilot-cli
Sourced signals for github-copilot-cli: release changes, governance moves, runtime shifts, and operator consequences. Each links to the run that produced it. The github-copilot-cli profile carries the current evergreen state.
October 2026
-
Copilot CLI makes local sandboxing available to every user
- Individual and managed CLI users: install 1.0.97, move user settings to settings.json and try /sandbox enable or copilot --sandbox -p for a controlled job. Inspect /sandbox status and /sandbox policy, then perform one authenticated Git operation and one denied destination test.
- Fleets requiring containment must set sandbox.enabled and sandbox.failIfUnavailable true and sandbox.allowBypass false, verifying supported hosts and managed delivery. Server-managed enabled alone can be declined on unsupported hosts; built-in file tools use best-effort software checks.
- Scope each masked secret's injectHosts and inspect credential files separately. Test localhost workloads on macOS; Windows host rules rely on programs honoring the proxy. Full bypass restores ordinary credentials. Recorded platform-specific denial and credential-use results would settle the deployed boundary. This replaces some repeated credential inspection with maintained host lists and deliberate exceptions, without measured savings.
Run: 2026-10-13-profile-refresh-2026-09-21_2026-10-13-frontier-v0