AI SECURITYLABS

Security for Copilot Development: Before your first session

Part 8 of 16

Before your first session

  • Update everything: use VS Code 1.132.1 or later, Copilot Chat 1.123.2 or later and Visual Studio 2022 17.14.26 or later, and keep the Copilot CLI current.
  • Use your organisation’s seat: work then falls under its Copilot policies.
  • Keep Workspace Trust on: it is on by default, and opening a folder in restricted mode disables agents there (VS Code docs).
  • Turn on push protection: secret scanning with push protection blocks pushes that contain secrets it recognises, whoever wrote them; it misses formats it doesn’t detect and secrets already in the history.