Back to extension profile

Extension Security Summary

GitHub Copilot

GitHub.copilot@1.388.0

Security outcomeReview needed

The extension exposes sensitive capabilities or non-confirmed risk evidence that needs context.

Checked version1.388.0

Analysis statusCompleted

Scan date—

What this means

The key information before you install.

This is a plain-language summary of the completed analysis for this exact extension version. Technical evidence and workspace actions are available after sign-in.

Permission Passport · exact release

What this extension can reach.

Six consistent access categories, tied to version 1.388.0. Capability describes power—not malicious intent.

Current analysisLatest release @1.388.0

3 categories observed@1.388.0 analyzed releaseBound artifact identity

Workspace and filesystem accessFiles

Filesystem

Observed

Commands, processes, and install scriptsTerminal

Lifecycle Scripts · Process Execution

Observed

Outbound connections and remote servicesNetwork

Network

Observed

Credentials, environment, and sensitive configurationSecrets

Not observed in this scan—not a guarantee of absence.

Not observed

Editor commands, webviews, and user interactionEditor

Not observed in this scan—not a guarantee of absence.

Not observed

AI models, autonomous tools, MCP, and delegationAgents & tools

Not observed in this scan—not a guarantee of absence.

Not observed

Release context

Versions

1.388.0Review needed 1.387.1816Not analyzed 1.387.0Not analyzed 1.386.1815Not analyzed 1.383.1811Not analyzed 1.380.1802Not analyzed