policies / copilot.yml

GitHub Copilot CLI Policy

Allows access to the minimum binaries and locations needed by GitHub Copilot CLI. Intentionally does NOT include any additional, potentially invasive tools like sh, bash, git, etc.

coding-agent

Include

stonewall policy include https://stonewall.sh/policies/copilot.yml

Source

Raw file · On GitHub

# $schema: https://stonewall.sh/schema.json

####################################################################################
# This is an official stonewall.sh policy and should not be changed locally.       #
# Please always review remote policies before applying them. Stonewall and its     #
# policies come without warranty of any kind. See LICENSE for details.             #
####################################################################################

policy:
  name: GitHub Copilot CLI
  url: https://stonewall.sh/policies/copilot.yml
  tier: 3
  tags:
    - coding-agent
  description: >
    Allows access to the minimum binaries and locations needed by GitHub Copilot CLI.
    Intentionally does NOT include any additional, potentially invasive tools like
    sh, bash, git, etc.
bin:
  allowed:
    - copilot
    - node
expose:
  write:
    - ~/.copilot
    - ~/.cache/copilot
    - ~/Library/Caches/copilot