megachangelog
Feature

Enterprise-managed settings now support strictKnownMarketplaces in VS Code and GitHub Copilot CLI

Enterprises can now control which plugins users can install in GitHub Copilot CLI and VS Code through the strictKnownMarketplaces setting, available in public preview.

Enterprises can now control which plugins their users can install in GitHub Copilot CLI and VS Code. This setting is now available in public preview.

Add strictKnownMarketplaces to your enterprise-managed settings.json, and Copilot will only allow plugins to be installed from the marketplaces you’ve explicitly defined. GitHub Copilot automatically pulls and applies these settings for users licensed through your Copilot Business or Copilot Enterprise account. This is a direct way to enforce your client governance strategy prior to tool execution by removing the risk of users installing untrusted plugins.

Enterprise policy configuration showing the strictKnownMarketplaces setting

This update builds on the enterprise-managed plugins for Copilot CLI and VS Code capabilities we launched earlier.

To learn more, see our documentation on Enterprise managed client settings.

Join the discussion within GitHub Community.

The post Enterprise-managed settings now support strictKnownMarketplaces in VS Code and GitHub Copilot CLI appeared first on The GitHub Blog.

copilotvscodeenterprisesettingssecurity

Source: original entry ↗

More from GitHub

Follow GitHub to get its new changes in your feed and email digest.

Announcement

Claude Haiku 5.5 now available in GitHub Copilot

Claude Haiku 5.5, Anthropic's lightweight model, is now generally available in GitHub Copilot for fast, high-volume tasks like subagents, quick edits, and terminal operations.

copilotaimodelsannouncement
Feature

Purpose-built model for leaked secret detection

GitHub introduced a new purpose-built model for detecting leaked secrets that provides context-aware detection to keep pace with modern software development practices, including AI-assisted coding.

securitysecret-detectionaiprotection
Announcement

Local sandboxing for GitHub Copilot now generally available

GitHub Copilot's local sandboxing feature is now generally available across GitHub Copilot CLI, the GitHub Copilot app, and VS Code sessions using Agent Host, providing developers with a secure environment for testing and development.

copilotaisecuritysandboxvscode
See all GitHub changes →