Start Debugging

Tag: sandboxing

2 posts

2026-10-12 github-copilot ai-agents copilot-cli

How to Turn On Copilot Local Sandboxing and Restrict Which Directories, Hosts, and Credentials an Agent Can Touch

Enable GitHub Copilot local sandboxing in Copilot CLI 1.0.95 and the Copilot app, then lock down filesystem paths, outbound hosts, git/gh tokens and masked environment variables. Covers the settings.json keys, /sandbox policy, the bypass escape hatch, enterprise enforcement, and the gotchas on macOS, Linux and Windows.

2026-09-27 ai-agents claude-code security

How to Run a Coding Agent in a Disposable VM or Container Instead of on Your Laptop

Dev containers, Docker Sandboxes microVMs, Lima VMs, and hosted cloud sandboxes all move Claude Code, Codex, or Copilot CLI off your host. What each one actually isolates, the exact commands to make it throwaway, and the two things none of them protect: your writable workspace and your git hooks.