Skip to content

Added copilot security config#983

Open
vietle-cgi wants to merge 2 commits intomainfrom
copilot-security-config
Open

Added copilot security config#983
vietle-cgi wants to merge 2 commits intomainfrom
copilot-security-config

Conversation

@vietle-cgi
Copy link
Collaborator

@vietle-cgi vietle-cgi commented Jan 16, 2026

This PR adds shared GitHub Copilot settings and a .copilotignore file.

What this does:

  • Prevents Copilot from automatically using certain files (e.g. config files, .env, .json, .yaml) as background context when generating suggestions
  • Disables inline Copilot suggestions for all files by default, and enables them only for specified languages
  • Helps reduce accidental exposure of sensitive configuration in Copilot suggestions
  • Makes Copilot behavior consistent across the team

What this does NOT do (important):

  • It does not stop Copilot from reading a file if a developer explicitly opens it and asks Copilot to explain or analyze it (for example using Ctrl + I)
  • It cannot prevent intentional use of Copilot on these files

In short, this change limits automatic Copilot usage but does not block explicit user actions.

@sonarqubecloud
Copy link

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant