Cloud and local sandboxes for GitHub Copilot

Configure local sandboxing for your Copilot CLI sessions, and manage cloud sandbox access for your organization or enterprise.

Enabling or disabling cloud sandboxes for your organization or enterprise

You can control whether members of your organization or enterprise can use cloud sandboxes by managing the cloud sandbox access policy in your organization or enterprise settings.

Using local sandboxing

Enable local sandboxing so that Copilot CLI runs the commands and tools it invokes on your behalf inside an operating-system sandbox.

Configuring local sandbox settings

Use the /sandbox slash command in Copilot CLI to control how the local sandbox restricts filesystem access, network connectivity, and system capabilities.