GitHub Copilot CLI

nonecli

Local, full privileges by default ('same access as you'); an opt-in preview sandbox and a --cloud mode exist.

documentedGitHub Copilot CLI concepts docs ↗

No OS-level isolation. This agent runs commands with your full user privileges. Its guardrails (approval prompts, allowlists) live inside your trust boundary, wrap it in a boundary you control.

By default Copilot CLI runs locally with your full user privileges ('same access as you'), gated only by approval prompts, with no OS sandbox, a local sandbox is opt-in via /sandbox (preview). Its --cloud mode runs on Azure Container Apps Sandboxes instead.

Sources

GitHub Copilot docs