Sandboxing Coding Agents: GitHub Copilot and Docker
An agent fixing a failing test needs to read code, install dependencies, and run commands. It probably does not need your SSH keys, access to another client's repository, or a connection to a production database. Yet a terminal running under your account may expose all three.
The question is not whether you trust the model to be helpful. It is whether the environment limits the consequences when the model, a dependency, or an instruction it encounters is wrong.
Sandbox the execution, not just the conversation. GitHub Copilot and Docker both offer sandboxing, but the boundaries are different. They can also work together.

