Building guardrails for GitHub Copilot cloud agent

Configure your enterprise so that agente en la nube de Copilot will operate in a secure, compliant environment.

En este artículo

Before you enable agente en la nube de Copilot, it is good practice to set up your enterprise so you can be confident Copilot will operate within secure, predictable guardrails.

Learn about built-in protections

agente en la nube de Copilot has a strong base of built-in security protections designed to protect against common risk points of AI agents. See Riesgos y mitigaciones para GitHub Copilot agente en la nube.

Plan policy settings

Plan your policies for agente en la nube de Copilot in advance. Policies allow you to set a baseline for restrictions at the enterprise level, which organization owners can restrict further if needed.

Some questions to ask are:

Which policies don't apply?

The following Copilot policies don't apply to agente en la nube de Copilot:

  • Content exclusions
  • Custom models (providing your own LLM API keys)
  • Private MCP registries

Adapt rulesets

agente en la nube de Copilot is already restricted from actions like pushing to a default branch or merging pull requests. You can build on these default protections in branch rulesets. agente en la nube de Copilot is subject to rulesets just like human developers.

To adapt your rulesets for agente en la nube de Copilot:

  • Consider whether additional rules are required in repositories where agents will operate, such as requiring results from code scanning or Code Quality. If you have identified the organizations or repositories where agente en la nube de Copilot will be enabled, you can apply a custom property to them so they're easy to target in a ruleset.
  • Consider whether agente en la nube de Copilot will be blocked by any of your existing rulesets. Copilot can sign its commits, but it may not be able to follow other rules that restrict commit metadata.
  • Protect important Copilot and MCP configuration files with a CODEOWNERS file, and enable the "Require review from Code Owners" rule, so that edits to these files must be approved by specific teams. For filepaths to target, see guía rápida de personalización de Copilot.

Set up your GitHub Actions environment

agente en la nube de Copilot operates on GitHub Actions runners. Set up your runners and policies so that Copilot operates securely.

Store data and secrets

Continue to store data and tokens that you don't want Copilot to access as GitHub Actions variables or secrets. Copilot won't be able to access these in its sessions or environment setup steps.

If you need to provide data and secrets that agente en la nube de Copilot does need, you'll be able to do this in a specific copilot environment.

Configure runners

Decide which runners you will use for agente en la nube de Copilot. We recommend using GitHub-hosted runners, so that each agente en la nube de Copilot runs on a fresh virtual machine. If you use self-hosted runners, we recommend using ephemeral runners.

Organization owners can restrict the agente en la nube de Copilot's runners to a specific runner label, to be used automatically in all repositories. See Configuración de runners para el agente de GitHub Copilot en la nube de tu organización.

Configure workflow policies

Decide whether GitHub Actions workflows should be blocked from running in pull requests that agente en la nube de Copilot creates. See Configuración de opciones para GitHub Copilot agente en la nube.

By default, workflows are blocked from running until someone with write access approves them. Repository administrators will be able to disable this feature, so communicate with them in advance about your preferred setting.

Review default permissions

Review the default permissions for the GITHUB_TOKEN in your enterprise. See Aplicación de directivas para GitHub Actions en la empresa.

This policy does not affect the token that Copilot will receive for its sessions, but the GITHUB_TOKEN is used in environment setup steps defined in copilot-setup-steps.yml workflow files.

Bear in mind that developers will be able to set their own permissions in these workflow files, and you should encourage them to use the minimum required permissions in all workflows.

Next steps

When you're ready to enable agente en la nube de Copilot, see Administración del agente de nube de GitHub Copilot en su empresa.