CapitalGuard Observatory · Tool record

GitHub Copilot

GitHub · coding assistant

GitHub Copilot can use editor context, repository indexes, pull requests, issues, and agent workflows, with policy and content-exclusion behavior depending on plan and surface.

Public-Control Score

Extensive public control coverage

Measures publicly documented control coverage as of the review date. It is not a breach rate, penetration test, endorsement, or guarantee of safety.

Scored dimensions

The documented control surface.

This record is reviewed against the same five-dimension rubric used across every scored product.

Read Methodology

Access and scope transparency

18/20

Official material provides extensive operational detail for access and scope transparency.

Data and retention controls

14/20

Official material names concrete controls and meaningful boundaries for data and retention controls.

Connector and permission controls

17/20

Official material provides extensive operational detail for connector and permission controls.

Action, approval, and isolation controls

18/20

Official material provides extensive operational detail for action, approval, and isolation controls.

Audit and administrative evidence

19/20

Official material provides extensive operational detail for audit and administrative evidence.

Documented access points

open editor and workspace context

repository semantic indexes

Copilot agents, pull requests, issues, and workflows

Settings to verify now

Content exclusions and repository indexing

Organization and enterprise Copilot policies

Agent permissions, branch protection, and review rules

Linked security signals

Version checks that should not wait.

CGO-CHANGE-2026-06-09 · informational

GitHub adds security validation for third-party coding agents

Supported GitHub agent workflows; coverage depends on repository and agent settings.

Keep the validation enabled, but retain branch protection, review, and least-privilege controls around agent-generated changes.

CGO-RESEARCH-2026-05 · informational

AgentSecBench formalizes three enforceable agent-security boundaries

Agentic systems that combine untrusted content, private context, and action-capable tools.

Project trusted provenance, restrict capabilities before generation, and validate outputs before execution.

Primary sources

Inspect the evidence directly.

GitHub: Repository indexing for Copilot Official indexing and content-exclusion behavior.GitHub: Responsible use of Copilot agents Official limitations and review responsibilities for agent-generated work.

Linked evidence

Ten practical GitHub Copilot checks.

All 100 Guides

Private file access

GitHub Copilot Private File Access: What to Check

Credential exposure

GitHub Copilot API Key Exposure: Check Before You Share

Client confidentiality

GitHub Copilot Client Data Safety for Freelancers

Prompt injection

GitHub Copilot Prompt Injection: A Practical Defense

Connector permissions

GitHub Copilot Connector Permissions: Review the Real Scope

Command execution

GitHub Copilot Command Execution: Keep Control

Unsafe generated code

GitHub Copilot Generated Code Risks: Review Before You Run

History and sharing

GitHub Copilot Chat History and Shared Links: Privacy Check

Accidental oversharing

GitHub Copilot Sensitive Data: What Not to Paste

Autonomous actions

GitHub Copilot Autonomous Actions: Approval Safety Guide