GitHub Copilot for JetBrains adds enterprise-managed sandbox policies in public preview
On September 8, GitHub added enterprise-managed sandbox policies to its Copilot JetBrains plugin. Administrators can centrally control filesystem, network, proxy, developer tools, and macOS Keychain access; managed settings are marked non-overrideable in the plugin.
On September 8, GitHub added enterprise-managed sandbox policies in public preview to its Copilot plugin for JetBrains IDEs. Administrators can configure sandbox behavior at the organization level and push the settings to every developer's machine—covering filesystem access, network access, proxy settings, developer-tool access, and macOS Keychain access.
Managed restrictions take precedence over developer-local settings. Locked-down settings are marked as org-managed inside the IDE and cannot be overridden locally. The same release also includes: next-edit suggestions that jump across files, project-wide context in chat, a new /ide command in the Copilot CLI that links a terminal session to JetBrains IDE context, and generally available OpenTelemetry settings for Copilot Chat.
GitHub also shipped a policy diagnostics tool that lets administrators verify that managed settings are detected and enforced on developer endpoints. GitHub's governance rollout follows a monthly cadence: managed plugin lists in July, MCP server allowlists and telemetry routing in August, and sandbox policies in September—each closing a gap as agentic capabilities expand faster than controls.