Skip to content

GitHub Copilot's assisted permissions reach general availability

An LLM now screens every command, file access and URL request Copilot makes, waving through the safe ones automatically. It is live in Copilot CLI, the GitHub Copilot app and VS Code.

Source: GitHub

GitHub Copilot’s assisted permissions mode left preview and reached general availability on 26 October, now live in Copilot CLI, the GitHub Copilot app and Visual Studio Code. Instead of pausing before every command, file access or URL request, a large language model screens each one first: requests it classifies as clearly safe run without a prompt, and anything riskier still stops for manual approval.

You switch modes with /permissions in the CLI, the mode picker in the app, or the permissions picker in VS Code. Enterprise admins get separate controls: they can block the fully automatic “Allow All” mode while leaving “Assisted” available, disable “Assisted” outright, or set the default mode that new sessions start in, with developers able to override only where policy allows.

Why it matters: GitHub previewed this as a JetBrains-only extra last month. GA now covers the clients most developers actually run Copilot’s coding agent from, so it is worth turning on if manual approval on every file read has been making agent sessions too slow to bother with, and worth checking your org’s policy either way.

/permissions
Share

Related reading

Engineering

How to patch PHP in a hurry without breaking production

PHP ships an out-of-band fix for two critical flaws at 14:00 UTC today. Here is the hour of preparation that turns the patch into a non-event, and the runbook for when it lands.

ML for Web Devs

Tokens, context windows, and why your bill is what it is

The unit of billing for language models is not the request or the word. Once you understand tokens and how a context window fills up, the invoice stops being a surprise.

ML for Web Devs

RAG is just search with extra steps

Retrieval-augmented generation gets written up like an architecture. It is a search query, a string concatenation and one API call, and the search query is the part that decides whether it works.

More from The Wire

All briefs