Enterprises can now control which plugins their users can install in GitHub Copilot CLI and VS Code. This setting is now available in public preview.

Add strictKnownMarketplaces to your enterprise-managed settings.json, and Copilot will only allow plugins to be installed from the marketplaces you’ve explicitly defined. GitHub Copilot automatically pulls and applies these settings for users licensed through your Copilot Business or Copilot Enterprise account. This is a direct way to enforce your client governance strategy prior to tool execution by removing the risk of users installing untrusted plugins.

This update builds on the enterprise-managed plugins for Copilot CLI and VS Code capabilities we launched earlier.

To learn more, see our documentation on Enterprise managed client settings.

Join the discussion within GitHub Community.