{"id":5041,"date":"2026-09-09T16:13:58","date_gmt":"2026-09-09T16:13:58","guid":{"rendered":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/09\/09\/github-puts-guardrails-on-copilots-sandbox-inside-jetbrains-ides\/"},"modified":"2026-09-09T16:13:58","modified_gmt":"2026-09-09T16:13:58","slug":"github-puts-guardrails-on-copilots-sandbox-inside-jetbrains-ides","status":"publish","type":"post","link":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/2026\/09\/09\/github-puts-guardrails-on-copilots-sandbox-inside-jetbrains-ides\/","title":{"rendered":"GitHub Puts Guardrails on Copilot\u2019s Sandbox Inside JetBrains IDEs"},"content":{"rendered":"
\"\"<\/div>\n

\"\"<\/p>\n

JetBrains IDEs are where a lot of enterprise backend work happens \u2014 Java, Kotlin, Spring, big monorepos with a lot to break. So when an AI coding agent starts running shell commands inside that environment, the question isn\u2019t whether it\u2019s useful. It\u2019s what happens if it touches the wrong file, the wrong network path, or a credential it shouldn\u2019t have.<\/span><\/p>\n

GitHub\u2019s answer, rolled out this week, gives administrators direct control over that boundary. Enterprise-managed sandbox policies for Copilot in JetBrains are now in public preview, and they let IT teams centrally set what a sandboxed Copilot session can and can\u2019t do: whether sandboxing runs at all, what filesystem and network paths it can reach, which proxy it routes through, whether it can touch developer tools, and \u2014 on Mac \u2014 whether it gets access to the Keychain. Once an admin locks a setting, it shows up in the JetBrains plugin marked \u201c(managed),\u201d and developers can\u2019t override it locally.<\/span><\/p>\n

This isn\u2019t a new idea for GitHub. Local and cloud sandboxes for Copilot CLI went into public preview back in June, giving developers a way to restrict what an agent could reach on their machine (<\/span>\/sandbox enable<\/span>) or offload heavier tasks to an ephemeral cloud Linux box instead. Enterprises could already enforce some of that through Intune or other device management platforms. What\u2019s changed is where the control now lives. Instead of routing sandbox policy through general-purpose MDM tools, GitHub is building it directly into the Copilot plugin\u2019s managed settings \u2014 the same mechanism it introduced in August for governing plugins, MCP server allowlists, and telemetry routing in JetBrains. Sandbox behavior joins that list as another lever administrators can pull without touching the operating system layer.<\/span><\/p>\n

That\u2019s a meaningful distinction for platform and security teams. MDM policy is broad and often slow to change. A setting baked into the tool itself, distributed through the same channel as everything else Copilot-related, lets a platform team adjust it in an afternoon instead of routing through a device management change request.<\/span><\/p>\n

The release includes a few other pieces worth flagging alongside the sandbox controls. A policy diagnostics tool lets admins verify their managed settings are being detected and enforced on developer machines \u2014 useful, since a policy nobody can confirm is running is close to no policy at all. Copilot\u2019s next-edit suggestions can now jump across files instead of stopping at the one you\u2019re in, which matters for changes that touch multiple layers of a codebase. Chat can pull in project-wide context instead of requiring developers to attach files one at a time. And the Copilot CLI\u2019s <\/span>\/ide<\/span> command now connects a terminal session directly to JetBrains context, so a command-line agent session can see the same selections and diagnostics the IDE sees. OpenTelemetry settings for Copilot Chat, previously managed-only, are now available to everyone.<\/span><\/p>\n

Mitch Ashley, vice president and practice lead for CIO & Technology Buyers and Software Lifecycle Engineering at The Futurum Group<\/a>, sees the sandbox policy as part of a bigger shift in how enterprises need to think about AI coding tools.<\/span><\/p>\n

\u201cOnce an agent can execute commands, edit across files, and reach the network on its own, the IDE isn\u2019t just an editor anymore \u2014 it\u2019s a runtime that needs the same access controls as any other system touching production code,\u201d Ashley said. \u201cBuilding sandbox policy into the tool itself, rather than leaving it entirely to device management, is what lets security teams actually verify what\u2019s enforced instead of assuming it. That verification piece is the part most organizations still skip.\u201d<\/span><\/p>\n

That verification point lines up with what GitHub shipped alongside the sandbox controls. A diagnostics tool that confirms policy enforcement is really an admission that trust-but-don\u2019t-verify doesn\u2019t hold up once an agent is running shell commands on its own. Teams that have spent the last few months turning on Copilot\u2019s agentic features \u2014 autopilot, bypass-approval modes, cloud sandboxes \u2014 now have a way to check that the boundaries they set are actually in place, not just configured.<\/span><\/p>\n

None of this is dramatic if you\u2019ve been watching GitHub\u2019s Copilot governance work over the summer. Managed plugin lists in July, MCP server allowlists and telemetry routing in August, and now sandbox policy in September \u2014 it\u2019s the same pattern applied to a new surface each time. The through-line is that agentic AI features keep shipping faster than the controls around them, and GitHub keeps circling back to close that gap one setting at a time.<\/span><\/p>\n

For engineering and platform teams running JetBrains at scale, the practical move is straightforward: don\u2019t treat this as a JetBrains plugin update to skim past. Pull up the policy diagnostics tool before turning on any of Copilot\u2019s more autonomous modes, decide who owns the sandbox filesystem and network settings, and confirm those decisions are actually landing on developer machines rather than sitting in a config file nobody checked. The tools to do that now exist. Whether organizations use them before or after something goes wrong is the part still up to them.<\/span><\/p>\n

Read More<\/a><\/p>\n

\u200b<\/p>","protected":false},"excerpt":{"rendered":"

JetBrains IDEs are where a lot of enterprise backend work happens \u2014 Java, Kotlin, Spring, big monorepos with a lot […]<\/p>\n","protected":false},"author":1,"featured_media":5042,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[5],"tags":[],"class_list":["post-5041","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-devops"],"_links":{"self":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/5041","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/comments?post=5041"}],"version-history":[{"count":0,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/posts\/5041\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media\/5042"}],"wp:attachment":[{"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/media?parent=5041"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/categories?post=5041"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rssfeedtelegrambot.bnaya.co.il\/index.php\/wp-json\/wp\/v2\/tags?post=5041"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}